d968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:22 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:22 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000060000000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3581.101366][T12329] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING [ 3581.137732][T12338] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:09:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000070000000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:22 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:22 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000080000000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3581.342847][T12753] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING [ 3581.363979][T12782] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:09:23 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3581.511070][T13146] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING [ 3581.585321][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3581.591194][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3581.597126][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3581.602880][ C0] protocol 88fb is buggy, dev hsr_slave_1 21:09:23 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x300000000000000}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000090000000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:23 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00#\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:23 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00#\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:23 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 21:09:23 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) [ 3582.009076][T13272] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:09:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe80000000000a0000000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3582.065264][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3582.071080][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3582.077052][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3582.082827][ C1] protocol 88fb is buggy, dev hsr_slave_1 21:09:23 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:23 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe80000000000b0000000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe80000000000c0000000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3582.244595][T13680] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING [ 3582.251746][T13698] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:09:24 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:24 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00L\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe80000000000e0000000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:24 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00L\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:24 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x400000000000000}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:24 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) [ 3582.930876][T14224] validate_nla: 9 callbacks suppressed [ 3582.930893][T14224] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:09:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe80000000000f0000000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:24 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:24 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:24 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3583.067613][T14536] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:09:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000100000000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3583.191212][T14652] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:09:24 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00h\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:24 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00h\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000110000000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3583.310490][T14957] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:09:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000120000000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:25 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00l\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3583.410453][T15186] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 3583.665330][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3583.671225][ C0] protocol 88fb is buggy, dev hsr_slave_1 21:09:25 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x500000000000000}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000130000000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:25 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00l\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3583.844399][T15474] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:09:25 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @link_local, [{}], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x0, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) recvmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 21:09:25 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:25 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000140000000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:25 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:25 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @link_local, [{}], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x0, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) recvmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) [ 3584.002277][T15692] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:09:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000480000000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:25 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @link_local, [{}], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x0, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) recvmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 21:09:25 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00z\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3584.147328][T15938] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:09:26 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x600000000000000}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:26 executing program 1: r0 = socket$packet(0x11, 0x0, 0x300) syz_emit_ethernet(0x42, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @link_local, [{}], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x0, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 21:09:26 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00z\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe80000000004c0000000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:26 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x88\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3584.721881][T16221] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:09:26 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:26 executing program 1: r0 = socket$packet(0x11, 0x0, 0x300) syz_emit_ethernet(0x42, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @link_local, [{}], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x0, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 21:09:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000600000000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:26 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x90\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:26 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x88\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3584.876138][T16533] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:09:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000680000000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:26 executing program 1: r0 = socket$packet(0x11, 0x0, 0x300) syz_emit_ethernet(0x42, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @link_local, [{}], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x0, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 21:09:27 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x700000000000000}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:27 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 21:09:27 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 ', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe80000000006c0000000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:27 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x90\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3585.674728][T16960] xt_check_target: 9 callbacks suppressed [ 3585.674753][T16960] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING [ 3585.688267][T16964] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:09:27 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000740000000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:27 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:27 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 21:09:27 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe80000000007a0000000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3585.900533][T17330] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING [ 3585.949392][T17393] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:09:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000f00000000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:28 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x800000000000000}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:28 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:28 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000300000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000500000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3586.594939][T17806] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:09:28 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:28 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 21:09:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000600000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:28 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:28 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000700000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3586.828779][T18233] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:09:28 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3586.961195][T18600] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:09:29 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0xe00000000000000}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:29 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000900000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:29 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000a00000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3587.488941][T18754] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING [ 3587.518620][T18756] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:09:29 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:29 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x0, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 21:09:29 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000b00000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:29 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:29 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x0, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 21:09:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000c00000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3587.774248][T19270] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:09:30 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x3f00000000000000}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:30 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:30 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x0, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 21:09:30 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000e00000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3588.400315][T19601] validate_nla: 13 callbacks suppressed [ 3588.400324][T19601] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:09:30 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:30 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) syz_emit_ethernet(0x42, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @link_local, [{}], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x0, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 21:09:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000f00000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:30 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfe\xff\xff', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:30 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00#\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3588.606951][T19919] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:09:30 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) syz_emit_ethernet(0x42, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @link_local, [{}], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x0, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 21:09:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000001100000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3588.746930][T20191] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:09:30 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x4000000000000000}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:30 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:30 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) syz_emit_ethernet(0x42, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @link_local, [{}], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x0, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 21:09:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000001200000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:30 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3589.308410][T20341] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:09:31 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:31 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) syz_emit_ethernet(0x42, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @link_local, [{}], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x0, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000000)=0x100, 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 21:09:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000001300000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:31 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfe\xff\xff', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:31 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:31 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) syz_emit_ethernet(0x42, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @link_local, [{}], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x0, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000000)=0x100, 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) [ 3589.561353][T20662] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:09:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000001400000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3589.679459][T20903] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:09:31 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x8200000000000000}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:31 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:31 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) syz_emit_ethernet(0x42, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @link_local, [{}], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x0, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000000)=0x100, 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 21:09:31 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00L\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000002000000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3590.222584][T21085] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:09:32 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:32 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) syz_emit_ethernet(0x42, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @link_local, [{}], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x0, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, 0x0, 0x0) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 21:09:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000953200000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:32 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:32 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:32 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) syz_emit_ethernet(0x42, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @link_local, [{}], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x0, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, 0x0, 0x0) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) [ 3590.447138][T21398] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:09:32 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:32 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0xff00000000000000}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000003f00000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:32 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) syz_emit_ethernet(0x42, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @link_local, [{}], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x0, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, 0x0, 0x0) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 21:09:32 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00h\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:32 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3591.151858][T21830] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 3591.163567][T21824] xt_check_target: 6 callbacks suppressed [ 3591.163593][T21824] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING [ 3591.186272][T21827] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:09:33 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:33 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) syz_emit_ethernet(0x42, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @link_local, [{}], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x0, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000), 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 21:09:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000004000000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:33 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:33 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00l\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3591.368644][T22147] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:09:33 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) syz_emit_ethernet(0x42, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @link_local, [{}], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x0, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000), 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 21:09:33 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3591.538646][T22423] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:09:33 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0xffffffff00000000}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000004800000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:33 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) syz_emit_ethernet(0x42, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @link_local, [{}], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x0, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000), 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 21:09:33 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:33 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3592.053567][T22571] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING [ 3592.075335][T22574] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:09:33 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000004c00000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:33 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) syz_emit_ethernet(0x42, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @link_local, [{}], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x0, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) recvmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 21:09:33 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:33 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00z\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:34 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) syz_emit_ethernet(0x42, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @link_local, [{}], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x0, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) recvmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 21:09:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000655800000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3592.353010][T22900] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:09:34 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0x2]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:34 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:34 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) syz_emit_ethernet(0x42, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @link_local, [{}], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x0, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) recvmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 21:09:34 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x88\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000006000000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3592.963790][T23312] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:09:34 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:34 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) syz_emit_ethernet(0x42, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @link_local, [{}], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x0, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) recvmsg(r0, 0x0, 0x0) 21:09:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000586500000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:34 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:34 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x90\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:34 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) syz_emit_ethernet(0x42, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @link_local, [{}], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x0, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) recvmsg(r0, 0x0, 0x0) 21:09:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000006800000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3593.240419][T23635] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:09:35 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0x3]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:35 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:35 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) syz_emit_ethernet(0x42, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @link_local, [{}], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x0, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) recvmsg(r0, 0x0, 0x0) 21:09:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000006c00000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:35 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3593.839258][T24056] validate_nla: 6 callbacks suppressed [ 3593.839267][T24056] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 3593.884247][T24059] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:09:35 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:35 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'vlan0\x00\x00e0\x00', 0x2001}) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) dup3(r0, r1, 0x0) 21:09:35 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000007400000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:35 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3594.128604][T24379] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 3594.167077][T24376] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:09:35 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000007a00000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3594.321891][T24753] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:09:36 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0x4]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:36 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:36 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'vlan0\x00\x00e0\x00', 0x2001}) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, 0x0) 21:09:36 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\xff\xff', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000008100000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3594.763924][T25002] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:09:36 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000329500000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:36 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\xff\xff', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:36 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:36 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x2001}) [ 3595.058127][T25420] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:09:36 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) sendmsg$netlink(r2, &(0x7f0000000280)={0x0, 0x9d3, &(0x7f00000002c0), 0x190}, 0x0) 21:09:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe800000000000f000000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3595.209192][T25774] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:09:37 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0x5]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:37 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:37 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:37 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) sendmsg$netlink(r2, &(0x7f0000000280)={0x0, 0x9d3, &(0x7f00000002c0), 0x190}, 0x0) 21:09:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000004003000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3595.706464][T25943] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:09:37 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:37 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) 21:09:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000340000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:37 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:37 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3595.948599][T26260] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:09:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000fffff0000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:37 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3596.143358][T26567] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 3596.219949][T26634] xt_check_target: 4 callbacks suppressed [ 3596.219971][T26634] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:09:38 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0x6]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:38 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000ffffff000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:38 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3596.633544][T26787] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:09:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000010000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:38 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:39 executing program 1: 21:09:39 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000020000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:39 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:39 executing program 1: 21:09:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000030000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3597.467279][T27344] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING [ 3597.496607][T27343] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:09:39 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0x7]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:39 executing program 1: 21:09:39 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:39 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfe\xff\xff\a\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:39 executing program 1: 21:09:39 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000040000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:39 executing program 1: 21:09:39 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3597.758286][T27852] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:09:39 executing program 1: 21:09:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000050000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:39 executing program 1: capset(&(0x7f0000000180)={0x20071026}, &(0x7f00000001c0)) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) 21:09:40 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0x8]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:40 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfe\xff\xff\x0f\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:40 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000060000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:40 executing program 1: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) pselect6(0x40, &(0x7f00000000c0)={0xffffffffffffff81, 0x0, 0x8, 0x0, 0x8}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8, 0x0, 0x4}, 0x0, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="1cae0f05c2bc03de"], 0x8}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2d) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 3598.597544][T28420] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:09:40 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:40 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f00000002c0)='./bus\x00', 0x40000141041, 0x0) stat(&(0x7f0000000000)='./bus\x00', 0x0) write$FUSE_ATTR(r1, 0x0, 0x0) socket(0x0, 0x0, 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x323) mlockall(0x0) syz_genetlink_get_family_id$tipc(0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000040)) r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) write$FUSE_POLL(r1, &(0x7f0000000540)={0x18, 0xfffffffffffffffe, 0x1, {0x3298}}, 0x18) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) r4 = socket(0x10, 0x80002, 0x0) bind$netlink(r4, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r4, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) times(&(0x7f0000000500)) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000180)={0x0, &(0x7f00000000c0)}) connect$netlink(r4, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000b4bffc)=0x7, 0x4) sendto(r4, &(0x7f0000000340), 0xac, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000780), 0x2bb1f36c7597d46, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r3, &(0x7f0000000140), 0x8fff) 21:09:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000070000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:40 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:40 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000080000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:40 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3598.878929][T29015] validate_nla: 7 callbacks suppressed [ 3598.878939][T29015] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 3598.915986][T29040] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:09:41 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0xe]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:41 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000090000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:41 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:41 executing program 1: poll(&(0x7f0000000080), 0x2000000000000091, 0x40) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x2a80, 0x0, 0x0, 0x800e00506) write(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x1789836bed901fc7, 0x0, 0x0, 0x800e0050e) shutdown(r0, 0x0) [ 3599.431118][T29369] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 3599.472557][T29370] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:09:41 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe80000000000000000a0000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:41 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:41 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f00000000c0)) 21:09:41 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00#\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3599.672293][T29800] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:09:41 executing program 1: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3599.745985][T29803] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING [ 3599.769192][T29807] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:09:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe80000000000000000b0000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3599.851117][T29908] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING [ 3599.914043][T30126] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:09:41 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0x82]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:41 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:41 executing program 1: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:41 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe80000000000000000c0000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3600.321122][T30244] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:09:42 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe80000000000000000e0000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:42 executing program 1: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:42 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:42 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3600.613987][T30577] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:09:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe80000000000000000f0000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:42 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3600.746694][T30943] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:09:42 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0x300]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:42 executing program 1: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:42 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00L\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000100000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:42 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3601.210224][T31215] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 3601.261712][T31218] xt_check_target: 3 callbacks suppressed [ 3601.261734][T31218] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING [ 3601.290485][T31219] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING [ 3601.319833][T31213] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:09:43 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000110000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:43 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:43 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:43 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3601.529226][T31533] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:09:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000120000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:43 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3601.660084][T31843] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 3601.764740][T32003] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:09:43 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0x500]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:43 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:43 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00h\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000130000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:43 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3602.172808][T32163] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:09:44 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:44 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00l\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:44 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000140000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:44 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000200000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:44 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3602.647753][ T496] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:09:44 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0x600]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe80000000000000003f0000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000200000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:44 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:44 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3603.094531][ T736] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:09:45 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:45 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 21:09:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000400000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:45 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00z\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:45 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000480000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3603.490000][ T1095] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:09:45 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x88\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3603.610521][ T1435] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:09:45 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0x700]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:45 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe80000000000000004c0000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:45 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x90\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3603.965473][ T1609] validate_nla: 7 callbacks suppressed [ 3603.965482][ T1609] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 3603.984826][ T1605] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:09:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000600000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3604.078969][ T1904] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:09:45 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:45 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:45 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\xff\xff\xfe\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000058650000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:45 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) [ 3604.359375][ T2045] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:09:46 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:46 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\xff\xff\xfe\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3604.465293][ C0] net_ratelimit: 18 callbacks suppressed [ 3604.465302][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3604.476908][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3604.483093][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3604.488925][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3604.494761][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3604.502023][ C0] protocol 88fb is buggy, dev hsr_slave_1 21:09:46 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0xe00]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000680000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:46 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 21:09:46 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:46 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3604.852194][ T2575] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 3604.945220][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3604.951075][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3604.957855][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3604.964487][ C1] protocol 88fb is buggy, dev hsr_slave_1 21:09:46 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe80000000000000006c0000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:46 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:46 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3605.259025][ T2899] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:09:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000740000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:47 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:47 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3605.375955][ T3204] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:09:47 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0x3f00]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe80000000000000007a0000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:47 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:47 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:47 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) [ 3605.779252][ T3593] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:09:47 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:47 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000810000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:47 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3606.112625][ T3919] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:09:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000ffffa8880000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:47 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:47 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3606.237005][ T4150] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 3606.341530][ T4344] xt_check_target: 8 callbacks suppressed [ 3606.341550][ T4344] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING [ 3606.361556][ T4342] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:09:48 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0x4000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000032950000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:48 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:48 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:48 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) [ 3606.684189][ T4557] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 3606.725624][ T4564] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING [ 3606.733922][ T4560] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:09:48 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000ffffff9e0000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:48 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:48 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00#\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000fffffff00000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:48 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000fffffffc0000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3607.265922][ T5287] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:09:49 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0x8200]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:49 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe800000000088a8ffff0000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:49 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00L\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:49 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) [ 3607.623801][ T5513] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING [ 3607.623930][ T5514] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:09:49 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe800000000000f0ffff0000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:49 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:49 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3608.021869][ T5834] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:09:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe800000000000ffffff0000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:49 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00h\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe80000000007fffffff0000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3608.168264][ T6166] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:09:50 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0xff00]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:50 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00#\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:50 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00l\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe80000000009effffff0000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:50 executing program 1: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) recvmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) [ 3608.472642][ T6468] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:09:50 executing program 1: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) recvmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 21:09:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000f0ffffff0000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:50 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:50 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:50 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:50 executing program 1: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) recvmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 21:09:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000fcffffff0000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3609.077796][ T7104] validate_nla: 9 callbacks suppressed [ 3609.077805][ T7104] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:09:50 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0x1000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:50 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00z\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:50 executing program 1: r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 21:09:50 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000000000010000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3609.331892][ T7221] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:09:51 executing program 1: r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 21:09:51 executing program 1: r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 21:09:51 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x88\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:51 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000000003400000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:51 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 21:09:51 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00L\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3609.876949][ T7653] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:09:51 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0x2000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:51 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x90\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000fffffffffffff00000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:51 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3610.245325][ T7865] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:09:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000000000000100aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:52 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3610.360596][ T8129] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:09:52 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00h\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000000000000200aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3610.494694][ T8353] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:09:52 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:52 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000000000000300aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:52 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00l\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3610.794777][ T8602] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:09:52 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0x3000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:52 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 21:09:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000000000000400aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:52 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:52 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3611.160074][ T8920] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 3611.185250][ C1] net_ratelimit: 12 callbacks suppressed [ 3611.185258][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3611.196815][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3611.202861][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3611.208701][ C1] protocol 88fb is buggy, dev hsr_slave_1 21:09:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000000000000500aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:52 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:53 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00z\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3611.281711][ T9170] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 3611.421845][ T9333] xt_check_target: 8 callbacks suppressed [ 3611.421866][ T9333] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING [ 3611.428537][ T9334] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:09:53 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000000000000600aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:53 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:53 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x88\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3611.736271][ T9547] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 3611.758451][ T9542] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:09:53 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0x4000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000000000000700aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:53 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x90\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:53 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:53 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 21:09:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000000000000800aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3612.128959][ T9861] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:09:53 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 ', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000000000000900aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3612.270885][T10276] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:09:54 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\xff\xff\xfe\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:54 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00#', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:54 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000000000000a00aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3612.687523][T10490] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING [ 3612.785269][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3612.791423][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3612.797378][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3612.803294][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3612.809210][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3612.815261][ C0] protocol 88fb is buggy, dev hsr_slave_1 21:09:54 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0x5000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000000000000b00aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:54 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\xff\xff\xfe\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:54 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:54 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000000)=0x100, 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 21:09:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000000000000c00aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3613.043082][T10856] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING [ 3613.047134][T10859] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:09:54 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:54 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000000000000e00aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3613.227223][T11277] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:09:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000000000000f00aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:55 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:55 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00L', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3613.580471][T11693] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:09:55 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0x6000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:55 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000000000001000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:55 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:55 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000000)=0x100, 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 21:09:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000000000001100aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:55 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00h', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000000000001200aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:55 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3614.148931][T12236] validate_nla: 10 callbacks suppressed [ 3614.148941][T12236] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:09:55 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00l', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:56 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000000000001300aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3614.450573][T12639] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:09:56 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0x7000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:56 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:56 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000000000001400aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:56 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000000)=0x100, 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) [ 3614.848700][T12748] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:09:56 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, 0x0, 0x0) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 21:09:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000000000002000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:56 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00z', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:56 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3614.980735][T12976] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:09:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000000000003f00aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3615.138383][T13295] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:09:56 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:56 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x88', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:57 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0x8000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:57 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000000000004000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:57 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x90', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:57 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, 0x0, 0x0) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) [ 3615.759010][T13598] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:09:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000000000004800aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:57 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3615.889620][T13838] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:09:57 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000000000004c00aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:57 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3616.005867][T14106] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:09:57 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000000000006000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3616.244393][T14435] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:09:58 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0xe000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:58 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:58 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000000000586500aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:58 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, 0x0, 0x0) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) [ 3616.676035][T14549] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 3616.709173][T14545] xt_check_target: 15 callbacks suppressed [ 3616.709194][T14545] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING [ 3616.739022][T14547] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:09:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000000000006800aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:58 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:58 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00#\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000000000006c00aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3616.892676][T14879] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING [ 3616.945243][ C0] net_ratelimit: 16 callbacks suppressed [ 3616.945251][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3616.956790][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3616.958484][T14968] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING [ 3616.962642][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3616.980159][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3616.986041][ C0] protocol 88fb is buggy, dev hsr_slave_0 21:09:58 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000), 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) [ 3616.991831][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3616.997710][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3617.003502][ C0] protocol 88fb is buggy, dev hsr_slave_1 21:09:58 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:58 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3617.157731][T15279] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING [ 3617.425277][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3617.431170][ C1] protocol 88fb is buggy, dev hsr_slave_1 21:09:59 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0x3f000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:09:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000000000007400aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:59 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:59 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000000000007a00aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3617.661426][T15391] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING [ 3617.668530][T15394] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:09:59 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000000000008100aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:09:59 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00L\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe800000000000000000ffffa88800aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3617.857197][T15810] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING [ 3617.881471][T15815] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:09:59 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000), 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 21:09:59 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:09:59 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:00 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0x40000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000000000329500aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:00 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:00 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfe\xff', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe800000000000000000ffffff9e00aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3618.550466][T16340] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:10:00 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe800000000000000000fffffff000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:00 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00h\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:00 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfe\xff', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:00 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000), 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 21:10:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe800000000000000000fffffffc00aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:00 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:01 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0x82000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe80000000000000000000ffffff00aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:01 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:01 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00l\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:01 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) recvmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) [ 3619.450397][T17292] validate_nla: 10 callbacks suppressed [ 3619.450407][T17292] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:10:01 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) recvmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 21:10:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000007fffffff00aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:01 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:01 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) recvmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 21:10:01 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3619.592794][T17575] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:10:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe800000000000000000ffffffff00aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3619.736993][T17727] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:10:01 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:02 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0xff000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:02 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) recvmsg(r0, 0x0, 0x0) 21:10:02 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe800000000000f0ffffffffffff00aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:02 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00z\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3620.356610][T18035] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:10:02 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) recvmsg(r0, 0x0, 0x0) 21:10:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000200000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:02 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:02 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) recvmsg(r0, 0x0, 0x0) [ 3620.488307][T18282] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:10:02 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x88\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000300000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3620.658743][T18564] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:10:02 executing program 1: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:02 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0x100000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:02 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:02 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000400000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:02 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x90\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:02 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000640)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\xe3\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\x00\x87\xac\xad\x80\xa3P\x8c\xea\x17f%;\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80\x1d\x95WM\x9a\xc6\x95\x98\xed\xe9\xca\x9e\xe6\xcb\x8e\xef\xf659-\xef\xb5\xc9\xf2\"\x15\xb39T\x81\x19\xcc\xcd\xb5\r\x10G\x16(~\x15\xd1\xde\x9e\xb1s\xa0\x864hb\xaa\xa3\x18V\x17xE\xbd\xc2QD\xa5P\x0f\x8e\x1f\x888\xb6\xee\xc6N\xd2\x136\xeb\xa4\x1d\xaap\xc6\x9e\xdc\x007h\f\x96g\"_\xb1\x1b\xdb\x86\xc6\xc9\xb1\xcc\xa1\x9f\xd8h\xcc\x12\xf1k\xe8\x86:D\xd2\xd1\x02I\xfe\x96t\xe5C\x86)\xf0M\xc4\xa35\xcc\x9b\x9e\xbb5\x18[\x958D\\~3\xcaO\x97M\xaf\x930\xfd\x13\xa3\xde\xce0\x1d5I\xba\xc5;T\xdc\xaf\xc8\xa6\n\x92\x0e6>\x19*') openat$cgroup_ro(r0, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000500000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:03 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:03 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3621.449341][T19020] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:10:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000600000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:03 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3621.610907][T19423] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:10:03 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0x200000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:03 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000700000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:03 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:03 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:03 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) [ 3622.200201][T19724] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:10:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000800000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3622.264456][T19727] xt_check_target: 16 callbacks suppressed [ 3622.264478][T19727] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:10:04 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:04 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:04 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000900000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:04 executing program 1: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3622.477921][T20242] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING [ 3622.493647][T20247] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING [ 3622.590840][T20365] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:10:04 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0x300000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000a00000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:04 executing program 1: syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x3, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) write$binfmt_script(r0, &(0x7f0000002ec0)={'!! ', './file0'}, 0xfdef) 21:10:04 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:04 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:04 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000b00000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:04 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) write$binfmt_script(r0, &(0x7f0000002ec0)={'!! ', './file0'}, 0xfdef) 21:10:04 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:04 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000c00000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3623.310995][T20858] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:10:05 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3623.511328][T21297] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:10:05 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0x400000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000e00000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:05 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:05 executing program 1: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:05 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:05 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000f00000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3624.117455][T21409] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:10:05 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\xff', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:05 executing program 1: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:05 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00#\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000001000000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3624.316570][T21884] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING [ 3624.336941][T21938] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:10:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000001100000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3624.383653][T21942] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING [ 3624.474812][T22202] validate_nla: 8 callbacks suppressed [ 3624.474822][T22202] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:10:06 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0x500000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:06 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\xff', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:06 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:06 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000001200000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:06 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) [ 3624.981900][T22359] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:10:06 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x4, 0x31, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(r1, 0x2275, &(0x7f00000000c0)) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="2121202e2f66696c65300aaa738d4cd19360cc642b0c11d00386803a92a00e8cad5f793f2f6b1cd84eaf6846a854665e71056c5668cfc0ce2f551ec8b96e495e18ed0e1963437499557f43bf038044991e0e2a53b34f38c8f96f168a0507bd537aa1fa912fb0baa10445788280de8380f45c90bbb82f30b954c2259a51a9b1dee764f8dd72cc47bfa595a20a0a0ff11a36e655c1c7506fcc0752d97b68d53882"], 0xfdef) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) 21:10:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000001300000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:06 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:06 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) write$binfmt_script(r0, &(0x7f0000002ec0)={'!! ', './file0'}, 0xa988) 21:10:06 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3625.180975][T22679] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:10:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000001400000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3625.296501][T22808] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:10:07 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) write$binfmt_script(r0, &(0x7f0000002ec0)={'!! ', './file0'}, 0x6270) 21:10:07 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000004800000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:07 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0x600000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:07 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00L\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:07 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) [ 3625.885904][T23097] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:10:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000004c00000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:07 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) write$binfmt_script(r0, &(0x7f0000002ec0)={'!! ', './file0'}, 0x4718) 21:10:07 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:07 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3626.061341][T23409] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:10:07 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) write$binfmt_script(r0, &(0x7f0000002ec0)={'!! ', './file0'}, 0x41a0) 21:10:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000006000000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:07 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) write$binfmt_script(r0, &(0x7f0000002ec0)={'!; ', './file0'}, 0xfdef) 21:10:07 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3626.223828][T23595] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:10:07 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00h\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:08 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0x700000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000006800000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:08 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:08 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) write$binfmt_script(r0, &(0x7f0000002ec0)={'!3 ', './file0'}, 0xfdef) 21:10:08 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00l\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:08 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) [ 3626.882555][T24057] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:10:08 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:08 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) write$binfmt_script(r0, &(0x7f0000002ec0)={'0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000006c00000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:08 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3627.067368][T24374] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:10:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000007400000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:08 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) write$binfmt_script(r0, &(0x7f0000002ec0)={'0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000007a00000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:09 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:09 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00z\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:09 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0x800000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:09 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) write$binfmt_script(r0, &(0x7f0000002ec0)={'0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe800000000000f000000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:09 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) write$binfmt_script(r0, &(0x7f0000002ec0)={';! ', './file0'}, 0xfdef) [ 3627.856691][T24794] xt_check_target: 10 callbacks suppressed [ 3627.856712][T24794] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:10:09 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x88\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000003000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:09 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3628.016675][T25171] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:10:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000005000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:09 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) write$binfmt_script(r0, &(0x7f0000002ec0)={'3! ', './file0'}, 0xfdef) 21:10:09 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x90\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:10 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0xe00000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:10 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000006000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:10 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) write$binfmt_script(r0, &(0x7f0000002ec0)={'3! ', './file0'}, 0xfdef) 21:10:10 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:10 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000007000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3628.768586][T25742] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:10:10 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:10 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) write$binfmt_script(r0, &(0x7f0000002ec0)={'/! ', './file0'}, 0xfdef) 21:10:10 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000009000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3628.955082][T26151] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:10:10 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3629.079284][T26267] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING [ 3629.144316][T26372] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:10:11 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0x3f00000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000000a00000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe800000000000000a000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:11 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:11 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:11 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) [ 3629.653489][T26587] validate_nla: 7 callbacks suppressed [ 3629.653499][T26587] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 3629.676921][T26579] netlink: 'syz-executor.1': attribute type 2 has an invalid length. 21:10:11 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab64f34395e606a7f274c7b72cec7346a0"}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) [ 3629.694391][T26588] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:10:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe800000000000000b000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:11 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:11 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3629.814865][T26906] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 3629.858463][T26914] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING [ 3629.882807][T26910] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:10:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe800000000000000c000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:11 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3629.968322][T27272] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 3630.042992][T27382] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:10:12 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0x4000000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:12 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab64f34395e606a7f274c7b72cec7346a0"}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:12 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe800000000000000e000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:12 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:12 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) [ 3630.582694][T27576] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:10:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe800000000000000f000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:12 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:12 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab64f34395e606a7f274c7b72cec7346a0"}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) [ 3630.696631][T27871] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:10:12 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000011000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3630.838355][T28152] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:10:12 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:13 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0x8200000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000012000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe800000ffffff0000000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:13 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:13 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:13 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) [ 3631.439635][T28627] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 3631.464411][T28621] netlink: 'syz-executor.1': attribute type 2 has an invalid length. 21:10:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe80000000007a0000000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000013000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:13 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000140000000000000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3631.580107][T28860] netlink: 'syz-executor.1': attribute type 2 has an invalid length. 21:10:13 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000014000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:14 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0xff00000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:14 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:14 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:14 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000020000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:14 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000009532000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:14 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:14 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:14 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfe\xff\xff\a\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe800000000000003f000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:14 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:14 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0xffffffff00000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:14 executing program 1: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00L', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000040000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:14 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfe\xff\xff\x0f\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:14 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3633.277153][T30247] xt_check_target: 9 callbacks suppressed [ 3633.277174][T30247] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING [ 3633.283211][T30249] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:10:15 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000048000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:15 executing program 1: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00L', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:15 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe800000000000004c000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:15 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3633.536142][T30739] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:10:15 executing program 1: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00L', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3633.719482][T31090] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:10:15 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0x0, 0x2]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000006558000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:15 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:15 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:15 executing program 1: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3634.203388][T31217] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING [ 3634.223794][T31223] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING [ 3634.239908][T31222] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:10:16 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000060000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:16 executing program 1: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00l\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:16 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:16 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00#\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000005865000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:16 executing program 1 (fault-call:2 fault-nth:0): r0 = socket$packet(0x11, 0x4000000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) [ 3634.457350][T31539] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:10:16 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000068000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:16 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0x0, 0x3]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:16 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3635.051955][T31962] validate_nla: 12 callbacks suppressed [ 3635.051965][T31962] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:10:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe800000000000006c000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3635.101352][T31960] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING [ 3635.178324][T32237] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:10:16 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:16 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:16 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000074000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3635.322751][T32385] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 3635.379386][T31889] FAULT_INJECTION: forcing a failure. [ 3635.379386][T31889] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3635.392682][T31889] CPU: 0 PID: 31889 Comm: syz-executor.1 Not tainted 5.3.0-rc2+ #84 [ 3635.401661][T31889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3635.412501][T31889] Call Trace: [ 3635.415806][T31889] dump_stack+0x172/0x1f0 [ 3635.420348][T31889] should_fail.cold+0xa/0x15 21:10:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe800000000000007a000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:17 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3635.425668][T31889] ? fault_create_debugfs_attr+0x180/0x180 [ 3635.431492][T31889] ? __bpf_address_lookup+0x310/0x310 [ 3635.436895][T31889] should_fail_alloc_page+0x50/0x60 [ 3635.442124][T31889] __alloc_pages_nodemask+0x1a1/0x8f0 [ 3635.447519][T31889] ? __unlock_page_memcg+0x53/0x100 [ 3635.452740][T31889] ? __alloc_pages_slowpath+0x2520/0x2520 [ 3635.458914][T31889] ? task_css.constprop.0+0x120/0x120 [ 3635.459762][T32670] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 3635.464381][T31889] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 3635.464398][T31889] alloc_pages_current+0x107/0x210 [ 3635.464416][T31889] __get_free_pages+0xc/0x40 [ 3635.464427][T31889] __tlb_remove_page_size+0x288/0x4a0 [ 3635.464442][T31889] unmap_page_range+0xed0/0x2170 [ 3635.464467][T31889] ? vm_normal_page_pmd+0x420/0x420 [ 3635.504187][T31889] ? __kasan_slab_free+0x102/0x150 [ 3635.509315][T31889] ? kasan_slab_free+0xe/0x10 [ 3635.514012][T31889] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3635.520363][T31889] ? uprobe_munmap+0xad/0x320 [ 3635.525165][T31889] unmap_single_vma+0x19d/0x300 [ 3635.530054][T31889] unmap_vmas+0x135/0x280 [ 3635.534417][T31889] ? zap_vma_ptes+0x110/0x110 [ 3635.539151][T31889] ? __kasan_check_write+0x14/0x20 [ 3635.544298][T31889] ? __kasan_check_write+0x14/0x20 [ 3635.549457][T31889] exit_mmap+0x2ba/0x530 [ 3635.553741][T31889] ? __ia32_sys_munmap+0x80/0x80 [ 3635.558712][T31889] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3635.564998][T31889] ? __khugepaged_exit+0xcf/0x410 [ 3635.570146][T31889] mmput+0x179/0x4d0 [ 3635.574065][T31889] do_exit+0x84e/0x2e50 [ 3635.574700][T32713] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING [ 3635.578326][T31889] ? task_work_run+0x118/0x1c0 [ 3635.578340][T31889] ? __kasan_check_read+0x11/0x20 [ 3635.578357][T31889] ? mm_update_next_owner+0x640/0x640 [ 3635.578370][T31889] ? __kasan_check_write+0x14/0x20 [ 3635.578384][T31889] ? lock_downgrade+0x920/0x920 [ 3635.578396][T31889] ? rwlock_bug.part.0+0x90/0x90 [ 3635.578408][T31889] ? get_signal+0x20e/0x2500 [ 3635.578421][T31889] do_group_exit+0x135/0x360 [ 3635.578435][T31889] get_signal+0x47c/0x2500 [ 3635.578457][T31889] ? ksys_dup3+0x3e0/0x3e0 [ 3635.639079][T31889] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3635.645568][T31889] ? debug_smp_processor_id+0x3c/0x214 [ 3635.653087][T31889] do_signal+0x87/0x1700 [ 3635.658063][T31889] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3635.664600][T31889] ? fput_many+0x12c/0x1a0 [ 3635.669297][T31889] ? fput+0x1b/0x20 [ 3635.673322][T31889] ? setup_sigcontext+0x7d0/0x7d0 [ 3635.678375][T31889] ? __sys_recvmsg_sock+0xd0/0xd0 [ 3635.683546][T31889] ? trace_hardirqs_on+0x67/0x240 [ 3635.688695][T31889] exit_to_usermode_loop+0x286/0x380 [ 3635.695335][T31889] do_fast_syscall_32+0xb87/0xdb3 [ 3635.700481][T31889] entry_SYSENTER_compat+0x70/0x7f [ 3635.705590][T31889] RIP: 0023:0xf7f479c9 [ 3635.709647][T31889] Code: d3 83 c4 10 5b 5e 5d c3 ba 80 96 98 00 eb a9 8b 04 24 c3 8b 34 24 c3 8b 3c 24 c3 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 21:10:17 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 21:10:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000081000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:17 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00L\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3635.729436][T31889] RSP: 002b:00000000f5d430cc EFLAGS: 00000296 ORIG_RAX: 0000000000000174 [ 3635.737870][T31889] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 00000000200000c0 [ 3635.745829][T31889] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3635.753813][T31889] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3635.761777][T31889] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3635.769755][T31889] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3635.818579][ T431] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:10:17 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0x0, 0x4]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:17 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000003295000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3635.976924][ T643] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:10:17 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:17 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe80000000000000f0000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:17 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3636.145246][ C1] net_ratelimit: 10 callbacks suppressed [ 3636.145255][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3636.156761][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3636.162587][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3636.168494][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3636.223212][ T856] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:10:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000040030000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:18 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3636.353267][ T1125] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:10:18 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x4, 0x0}, 0x0) 21:10:18 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00h\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000003400000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3636.733175][ T1392] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:10:18 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe800000000000fffff00000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:18 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0x0, 0x5]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) [ 3636.893868][ T1614] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:10:18 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:18 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00l\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe800000000000ffffff0000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:18 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00#', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000000100000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:18 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:19 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x40000, 0x0}, 0x0) 21:10:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000000200000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:19 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:19 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00L', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000000300000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:19 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0x0, 0x6]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) [ 3637.825349][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3637.831227][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3637.837231][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3637.843037][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3637.849026][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3637.856749][ C0] protocol 88fb is buggy, dev hsr_slave_1 21:10:19 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:19 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:19 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00z\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000000400000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:19 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x4000000000000, 0x0}, 0x0) 21:10:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000000500000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:19 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00h', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:19 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x88\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000000600000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3638.305936][ T3485] xt_check_target: 8 callbacks suppressed [ 3638.305959][ T3485] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:10:20 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00l', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000000700000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3638.425779][ T3782] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:10:20 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0x0, 0x7]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:20 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:20 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x90\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000000800000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:20 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:20 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x0) 21:10:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000000900000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3639.069884][ T4124] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:10:20 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x40000}, 0x0) 21:10:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000000a00000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:20 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\xff\xff\xfe\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:20 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00z', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000000b00000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3639.299881][ T4760] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING [ 3639.319720][ T4712] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:10:21 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0x0, 0x8]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:21 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000000c00000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:21 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x88', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:21 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\xff\xff\xfe\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:21 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4000000000000}, 0x0) 21:10:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000000e00000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:21 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x90', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:21 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000000f00000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3640.098892][ T5520] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:10:21 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3640.158152][ T5607] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING [ 3640.170371][ T5647] validate_nla: 14 callbacks suppressed [ 3640.170382][ T5647] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:10:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000001000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3640.264187][ T5842] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING [ 3640.309416][ T5934] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:10:22 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0x0, 0xe]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:22 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:22 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:22 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000001100000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:22 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) [ 3640.853647][ T6235] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 3640.877456][ T6238] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:10:22 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000001200000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:22 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3641.001930][ T6560] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 3641.022373][ T6544] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:10:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000001300000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:22 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3641.130433][ T6780] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:10:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000001400000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3641.251083][ T7086] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:10:23 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0x0, 0x82]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:23 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:23 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:23 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000002000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:23 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0) [ 3641.734296][ T7300] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:10:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000003f00000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:23 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3641.860770][ T7571] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:10:23 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000004000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3641.985250][ C0] net_ratelimit: 10 callbacks suppressed [ 3641.985264][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3641.996832][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3642.002663][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3642.008483][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3642.014322][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3642.020282][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3642.026157][ C0] protocol 88fb is buggy, dev hsr_slave_0 21:10:23 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:23 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3642.031925][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3642.048226][ T7812] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:10:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000004800000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3642.228729][ T8161] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:10:24 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0x0, 0x300]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:24 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0) 21:10:24 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:24 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:24 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000004c00000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000006000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:24 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:24 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000586500000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:24 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000006800000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:25 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3643.488221][ T9332] xt_check_target: 9 callbacks suppressed [ 3643.488244][ T9332] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:10:25 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) 21:10:25 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000006c00000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:25 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0x0, 0x500]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:25 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:25 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3643.612002][ T9450] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:10:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000007400000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:25 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000007a00000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3643.742172][ T9710] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING [ 3643.777695][ T9723] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:10:25 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00#\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:25 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000008100000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3643.908157][T10056] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING [ 3643.961732][T10127] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING [ 3644.065248][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3644.071033][ C0] protocol 88fb is buggy, dev hsr_slave_1 21:10:25 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0) 21:10:25 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe800000000000ffffa88800000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3644.252047][T10539] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:10:26 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0x0, 0x600]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:26 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000329500000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:26 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:26 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe800000000000ffffff9e00000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3644.530716][T10802] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:10:26 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00L\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:26 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe800000000000fffffff000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3644.709088][T11227] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING [ 3644.715744][T11224] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:10:26 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0) 21:10:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe800000000000fffffffc00000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:26 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:27 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0x0, 0x700]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:27 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe80000000000088a8ffff00000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:27 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:27 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) [ 3645.413181][T11847] validate_nla: 13 callbacks suppressed [ 3645.413190][T11847] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:10:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe80000000000000f0ffff00000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:27 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3645.534157][T12113] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:10:27 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00h\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe80000000000000ffffff00000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3645.688525][T12377] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:10:27 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4) 21:10:27 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000007fffffff00000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3646.013022][T12682] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:10:27 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0x0, 0xe00]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:27 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00l\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000009effffff00000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:27 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:27 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40000) 21:10:27 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) [ 3646.328162][T12993] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:10:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe800000000000f0ffffff00000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:28 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:28 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:28 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4000000000000) [ 3646.494634][T13412] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:10:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe800000000000fcffffff00000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:28 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3646.604087][T13585] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:10:28 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0x0, 0x3f00]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000000000000100aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:28 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00z\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:28 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:28 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) [ 3647.247568][T13940] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:10:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000000000034000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:29 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3647.382929][T14253] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:10:29 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x88\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:29 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0xaa, 0x0, 0x37e}, 0xfffffffffffffffc) 21:10:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe800000000000fffffffffffff000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:29 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3647.549954][T14588] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:10:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000000000000001aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:29 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0x0, 0x4000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:29 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x90\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:29 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000100)=""/181, &(0x7f0000000040)=0xb5) r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x5, 0x80) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000001c0)={0x0, 0x8, 0xff, 0x0, 0x0}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000240)={0x1, 0x201, 0x9eb4, 0x24, r2}, &(0x7f0000000280)=0x10) 21:10:29 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000000000000002aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:29 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) [ 3648.225248][ C0] net_ratelimit: 10 callbacks suppressed [ 3648.225257][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3648.244270][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3648.251320][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3648.258455][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3648.264370][ C0] protocol 88fb is buggy, dev hsr_slave_0 21:10:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000000000000003aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3648.270197][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3648.276231][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3648.281999][ C0] protocol 88fb is buggy, dev hsr_slave_1 21:10:30 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfe', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:30 executing program 1: r0 = socket$packet(0x11, 0x4000000008003, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 21:10:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000000000000004aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:30 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\xff\xff\xfe\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:30 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3648.543292][T15772] xt_check_target: 14 callbacks suppressed [ 3648.543318][T15772] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING [ 3648.600556][T15865] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:10:30 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0x0, 0x8200]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000000000000005aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:30 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 21:10:30 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\xff\xff\xfe\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:30 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfe', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:30 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000000000000006aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3649.237645][T16139] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING [ 3649.243033][T16136] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:10:31 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000000000000007aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:31 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3649.408227][T16543] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:10:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000000000000008aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:31 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3649.470858][T16562] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING [ 3649.570713][T16834] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:10:31 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0x0, 0xff00]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000000000000009aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:31 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:31 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:31 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x0, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in=@empty, @in6=@ipv4={[], [], @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000240)=0xe8) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6}}, &(0x7f0000000440)=0xe8) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x1000000, &(0x7f0000000540)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xf000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1e00}}, {@max_read={'max_read', 0x3d, 0xae}}], [{@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_role={'obj_role', 0x3d, 'wlan1ppp0-!^em1vmnet1.\t'}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@uid_lt={'uid<', r4}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'md5sumeth1posix_acl_access'}}, {@appraise='appraise'}, {@uid_gt={'uid>', r5}}, {@dont_appraise='dont_appraise'}, {@smackfshat={'smackfshat', 0x3d, 'wlan0'}}]}}) lseek(r0, 0x0, 0x1) 21:10:31 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe800000000000000000000000000aaae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:31 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:32 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3650.288556][T17514] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING [ 3650.305248][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3650.311071][ C0] protocol 88fb is buggy, dev hsr_slave_1 21:10:32 executing program 1: r0 = socket$packet(0x11, 0x4000080000001, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 21:10:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe800000000000000000000000000baae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:32 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3650.447288][T17829] validate_nla: 10 callbacks suppressed [ 3650.447297][T17829] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 3650.455647][T17811] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING [ 3650.482704][T17838] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:10:32 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0x0, 0x1000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:32 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x20) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000100)=""/78) openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x974fe1496753a570, 0x0) setsockopt$packet_int(r0, 0x107, 0x5, &(0x7f0000000000)=0x100, 0x4) accept4$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14, 0x0) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 21:10:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe800000000000000000000000000caae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:32 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:32 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:32 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) [ 3651.090004][T18228] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:10:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe800000000000000000000000000eaae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:32 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:32 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3651.234895][T18529] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:10:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe800000000000000000000000000faae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:33 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3651.355125][T18761] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:10:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000000000000010aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3651.459371][T19024] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:10:33 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0x0, 0x2000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:33 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:33 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000000000000011aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:33 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:33 executing program 1: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x2400, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0485510, &(0x7f0000000200)={0x1000, 0x4000240, 0x1, 0x7, &(0x7f0000000100)=[{}, {}]}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000080)=0xfe, 0x27337daf4510cbcb) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) [ 3652.053577][T19278] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:10:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000000000000012aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:33 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:33 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3652.159216][T19528] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:10:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000000000000013aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3652.277932][T19707] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:10:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000000000000014aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:34 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3652.401978][T20013] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:10:34 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0x0, 0x3000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:34 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000000000000020aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:34 executing program 1: r0 = socket$packet(0x11, 0x4001000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) sendmsg$nl_netfilter(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000100)={0x248, 0x4, 0x0, 0xb09, 0x70bd28, 0x25dfdbfb, {0x2, 0x0, 0xa}, [@generic="71c99a53b64ef183149064b48de05751db2fc95f19933a86aaf083866c28bc6415911c91a729f53bf298a6e9d91db4586a5aefeb11a1cc243ab550d35054e510cc46442569eb1dfd29566e59d06703f8947503f2bebbbe5e62d530bbf49c86f98613806ebc25416eface2c3546ca163b2022f8130dd0167ce41f1b50db3890dc882b6498b584d4448bbdae892e0730d126616de10911621333c6b0b309cde1e7d04d769ae0bbc2", @nested={0x68, 0x55, [@generic="d77124e7243885a3f3a2122849fa0dfafc4922922a4e2770d56d5719c193633554bc0b43cb1161a842f0cde7dc36d6c479c618cd0e3bc26170e6a0a1fe7c0842f86c3699e5e3144e62dbb07f1175e9ebc10cf9", @generic="b933eb16a5d254d9a13071b46107"]}, @generic="536a05e81d34efd4ff500be978c5b26da72260bb0a9a34e524a7244054a6da405badd05ec6b148701ba78b3efd04e1791e60261a85a9953bbf6ac9c12eceab99054e97265ec9f2acb9793a03e12dadafe02b9fca3fc38aaba05a931dffbddbb2a4b8d1b067cb81d7b9ff056fe00ab348adb466424154ce273b17d7e01de138b55facfc66b127ec55d928ae38e4c169993b8803137494b23591af339a9d8bdccdaf8955e8cc", @typed={0x1c, 0x3e, @str='selinux/vboxnet1md5sum\x00'}, @generic="ae8ed9ebf6d5583a849506b8e3ee73d69c845d7e316549fd0d94958819584fbe2e539d7c9e9e95b23b19bafc159c3dbaeb02d4a5698c842f034bee05f8a68bfe50cfb47a93984eb621d1c2646269dd9a9a0c796a1a6b6efaccd1c354", @typed={0x8, 0x11, @str='\x00'}]}, 0x248}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 21:10:34 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:34 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) [ 3652.987714][T20331] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:10:34 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe800000000000000000000000003faae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:34 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00#\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000000000000040aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:34 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000000000000048aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:35 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0x0, 0x4000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:35 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:35 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:35 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x17e, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='highspeed\x00', 0x7) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000000140)=0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x9) 21:10:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe800000000000000000000000004caae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:35 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:35 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:35 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00L\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000000000000060aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3654.020747][T21581] xt_check_target: 12 callbacks suppressed [ 3654.020768][T21581] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING [ 3654.023375][T21586] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:10:35 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:35 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) io_setup(0x5ce4, &(0x7f0000000040)=0x0) r2 = eventfd(0x4) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x8001, r0, &(0x7f0000000100)="76fb26c0d30ac5536fd29260765831842c05685563df5fff4c63b6614be6a8397f93a17ca47d6c2dcba70029b9d09b9b435192591eec4a9cda36f16d246001df349a3f305dfe2b1ea07686807926dd18542016616ca7e8750ef6cea2722c148e76c411208a68f355a1f12fe7c1e59fd190e3e136c1179504ed50ed3f0743d10345dc8a7f04fed5b0c6e014ef4718805ab21f0df75bb7842264f0745aa66e6323836385c92ccfc31df16292a2d2362c", 0xaf, 0x816, 0x0, 0x1, r2}]) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-control\x00', 0x2000, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000240)={0x7, r0}) 21:10:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000000000005865aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3654.191475][T22032] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:10:36 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0x0, 0x5000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:36 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:36 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000000000000068aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:36 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4, 0x4) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x80000) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000180)={0x8, 0x0, 0x5, {0x4, 0xfc2, 0x1}}) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x7cb0, 0x80000) write$P9_RREADLINK(r2, &(0x7f0000000080)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000100)) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) [ 3654.724581][T22410] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING [ 3654.750656][T22416] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:10:36 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe800000000000000000000000006caae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:36 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:36 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00h\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3654.865224][ C1] net_ratelimit: 14 callbacks suppressed [ 3654.865231][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3654.876771][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3654.882620][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3654.888422][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3654.903590][T22719] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:10:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000000000000074aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:36 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3654.987191][T22846] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:10:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe800000000000000000000000007aaae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3655.108388][T23081] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:10:37 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0x0, 0x6000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000000000000081aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:37 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00l\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:37 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:37 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) [ 3655.592838][T23458] validate_nla: 10 callbacks suppressed [ 3655.592847][T23458] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 3655.633567][T23462] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:10:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe80000000000000000000ffffa888aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:37 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:37 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:37 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3655.766398][T23776] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:10:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000000000003295aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3655.848858][T23820] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:10:37 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:37 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00z\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3655.920827][T24043] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:10:38 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0x0, 0x7000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe80000000000000000000ffffff9eaae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:38 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:38 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x88\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:38 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) r1 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80000) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000080)=0x80000001, 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x84, 0x0}, 0x0) [ 3656.505980][T24504] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 3656.545257][ C0] protocol 88fb is buggy, dev hsr_slave_0 21:10:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe80000000000000000000fffffff0aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3656.551135][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3656.556979][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3656.562770][ C0] protocol 88fb is buggy, dev hsr_slave_1 21:10:38 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:38 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) [ 3656.656065][T24778] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:10:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe80000000000000000000fffffffcaae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:38 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x90\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:38 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000040)=0x100, 0xfffffffffffffdd4) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x202000, 0x0) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r2, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x7fffffff}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr="c71d1f835cc9a7a6387d517a1401f2f0"}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x49}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x80000000}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffdc}, 0x0) 21:10:38 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3656.803586][T25040] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 3656.945258][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3656.951086][ C1] protocol 88fb is buggy, dev hsr_slave_1 21:10:39 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0x0, 0x8000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000000000ffffffaae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:39 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:39 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3657.413831][T25449] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:10:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe800000000000000000007fffffffaae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:39 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:39 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3657.565537][T25759] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:10:39 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe80000000000000000000ffffffffaae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:39 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3657.712782][T26043] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:10:39 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0xe47, 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 21:10:39 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:39 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0x0, 0xe000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe80000000000000f0ffffffffffffaae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:39 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:39 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3658.320256][T26501] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:10:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000002000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:40 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:40 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:40 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000003000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:40 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:40 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x101001, 0x0) ioctl$TIOCCONS(r1, 0x541d) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000100)=""/129) 21:10:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000004000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:40 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0x0, 0x3f000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:40 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:40 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000005000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:40 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) r1 = dup(r0) sendmsg$tipc(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000100)="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", 0x1000, 0x4008011}, 0x40000) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 21:10:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000006000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3659.213633][T27597] xt_check_target: 15 callbacks suppressed [ 3659.213653][T27597] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING [ 3659.214768][T27598] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:10:41 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3659.387488][T28015] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:10:41 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000007000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:41 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00#\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:41 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000008000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3659.598329][T28179] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:10:41 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0x0, 0x40000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:41 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000009000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:41 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:41 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f00000000c0)={0x1f, 0x38415262, 0xb322, 0xcab, 0x3, @stepwise={{0x50, 0x4}, {0xf107, 0x2}, {0x3, 0x6b6}}}) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x2000, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r3, 0x102, 0x70bd25, 0x25dfdbfd, {{}, 0x0, 0x4107, 0x0, {0x1c, 0x18, {0x3, @bearer=@l2={'eth', 0x3a, 'team_slave_0\x00'}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 21:10:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe800000000000000a000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3660.113990][T28643] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING [ 3660.133297][T28646] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:10:41 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3660.259452][T28960] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:10:42 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe800000000000000b000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:42 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:42 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:42 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000004c0)='/dev/vcsa#\x00', 0xffffffffffff67b7, 0x80040) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000000"], &(0x7f0000000540)=0x6) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x2010, r0, 0x10000000) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40, 0x0) statfs(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/98) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000240)={0x0, 0x1, 0x3, 0xfffffffffffffffa}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000003c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0b000000afc68ebf6eeb72d4194e315599d5811a2a780469285203b389fd73a2231f6fd5ec92a97e2d75a5d4c5145067d872c61bed367a39f98accea8b5da72011f2966f7b55186a9e62fd18bdbc010d0a1bc3f2f65730a6f5b15d57b118cab1dcc4bcd0f5a95c332e986f0c9f658fe128a4548e0f7eae4e68ca13cea79e291485c85f2801c75d64c5508626443d48b221aee65dd86ad73246cbd49b580f72e39aa55c8475c069b5f6788945af7e711e42151c13ef80b4ccdd23a9956a8351c0dfae96"], &(0x7f0000000300)=0x13) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e21, @empty}, 0x40, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)='irlan0\x00', 0x8000, 0x9, 0x1}) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f00000002c0)) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000600)) recvmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 21:10:42 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0x0, 0x82000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe800000000000000c000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:42 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:42 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00L\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:42 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000080)=0x400, 0xbe) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) [ 3660.992264][T29706] validate_nla: 10 callbacks suppressed [ 3660.992274][T29706] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 3661.029354][T29700] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:10:42 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:42 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3661.105238][ C1] net_ratelimit: 10 callbacks suppressed [ 3661.105255][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3661.126111][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3661.131949][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3661.137769][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3661.179019][T30034] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING [ 3661.200417][T30039] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:10:43 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe800000000000000e000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:43 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x9, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:43 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00h\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3661.352308][T30253] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:10:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe800000000000000f000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3661.474774][T30455] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:10:43 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0x0, 0xff000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:43 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00l\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:43 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x63, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000010000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:43 executing program 1: r0 = open(&(0x7f0000000000)='./file0\x00', 0x40180, 0x40) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000100)={0x0, 0x33, "66f707f9a07d3cf53068886dbb78b015cb9f342813ef57ba64514802df0ef13289e48d99d29ae0992f62328ac6ee65845d593b"}, &(0x7f0000000140)=0x3b) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000180)=r1, 0x4) r2 = socket$packet(0x11, 0x4000000000003, 0x300) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000040)=0x100, 0x4) recvmsg(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={r1}, &(0x7f0000000200)=0x8) [ 3661.916594][T30792] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:10:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000011000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:43 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x83, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3662.038798][T31123] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:10:43 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:43 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000012000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:43 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket$packet(0x11, 0x2, 0x300) 21:10:43 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x3b1, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3662.212242][T31424] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:10:44 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0x0, 0x100000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000013000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:44 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00z\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:44 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x2, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:44 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x40, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000640)={0x3, &(0x7f0000000480)=[{}, {}, {}]}) write$P9_RCLUNK(r1, &(0x7f0000000180)={0x221, 0x79, 0x1}, 0x7) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x600000000000, 0x80) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000100)=@req={0x2, 0x0, 0x6, 0x3}, 0x10) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000080)={0x10, 0x4, 0xfffffffffffffff8}) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0xfffffffffffffc49, 0x0, 0x34}, 0x0) sendmsg$nl_netfilter(r2, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x1d0, 0x9, 0xe, 0x20, 0x70bd2a, 0x25dfdbfe, {0x5, 0x0, 0x7}, [@typed={0x4, 0xe}, @generic="1aecfee6fffcae47672c48ebed5f6384b19b3fda0623174a5f0a4ea448a6d9dee53929365f1cc2fb40343e3b1360c8fba6cd5b796a073efe1ac82acf88f5d21adefc15efd85a78470df2634f0f82e2dd", @typed={0x10, 0x10, @str='/dev/full\x00'}, @nested={0x140, 0xf, [@generic="7836b85e658503d9c23a7b8415370db3139cfe4ee01aff849f6829c570aca071501d2c2331c65d53ea3840fccd19706caf02ea79419f774b787f6e5dfe4801dee42b3f43d5c3027515fdad3e8448771d3e6aad0bc1b2c9de2b8b21a01e9bd73dcaac00a344a975223ecbcca62f2735975492ce9fa13ef3869c9d16448b7354b96145edf1d2521d", @typed={0x4, 0x95}, @typed={0xc, 0x7c, @u64=0xda7}, @typed={0x8, 0x2a, @ipv4=@dev={0xac, 0x14, 0x14, 0xb}}, @generic="81a0e0d85206de3b04be5621dc649a9fd023b3053d15ad02d8f580c2fc619dd55519e743342e8250978a00a5e7e67d303d02c7b132ac5e3a652e1e74146769dbc53f196fea4073c30de3a0fa05f4127506b4ae7f933ee3dd007a42029133d51589304dd3bfcc2ae62a9672f699146eab7d917522dcf92c77a0380df03579808959b8de6df825fc06299d0af0b2117e2c5e", @typed={0xc, 0x2a, @u64=0x11ef}]}, @typed={0x10, 0x58, @str='/dev/full\x00'}, @nested={0x8, 0x12, [@typed={0x4, 0x4c}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x54}, 0x8040) [ 3662.827964][T31848] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:10:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000014000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:44 executing program 1: r0 = socket$packet(0x11, 0xbc59dc8e806f609e, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x100, 0xfe78) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20) [ 3662.954752][T32128] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:10:44 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:44 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x3, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:44 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x88\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000048000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:44 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netfilter\x00') r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg(r0, &(0x7f0000000500)={&(0x7f0000000200)=@ethernet={0x306, @remote}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000280)="b8bf1da1a9eca3054a20f8ef776363faaa6b084dcdc40fc9ce", 0x19}, {&(0x7f00000002c0)="031a01daa2e9e04c1bd0229d6ac6cba3c6eda42942622fe29f8fa8568ed9f399ac48c0ec1aeee58068ccc7cc2ed0f5962c2d53a1c306c65933e60aa1b0ed8f15a02482cc95cfd6dd3d4e06bf8ac7d02f81ac6be9cd39180e96626efa7dbe2f06840ea5f0402d429edb815fb258aba7c71355639177e362845fd355e120e5aaf3ad8d42a26cd73478402479ac599ca8a17709fe582461fb69bdbeb938134dc92c6aafd83cad4e12761971", 0xaa}, {&(0x7f0000000380)="c2c1a969ad3193d762d598e37bdded6c8828b4bf6dca54147123409f4634e46868d5a37a70d88e856fc5507352c567604b893b698e09c3aaa6972f51df5d6a2d2058f52ef24cb6fc59b92296bc61a9b9f8a08b2d5a416475ec6e9a81a3da98f91bdba5772d012c7115df7960897c9f2edfe8a89df36545614f52645c1f18010e6c47ecbfa84ee98925df9891e7f926145dc1e0c36e7959250efac92f802ffc504d3d96797d788a92e1660797b1f35cde8d1c6db77ecc9c525284bc7dabf47ad5a6fdc9c386af52364a4a96e63951315eedf9f0ef75d59494cea233925444bd28bd68900bcc", 0xe5}], 0x3, &(0x7f00000004c0)}, 0x4010) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r2, 0x300, 0x70bd2d, 0x25dfdbfb, {{}, 0x0, 0x4109, 0x0, {0x14, 0x18, {0x80, @bearer=@udp='udp:syz0\x00'}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x84}, 0x8041) [ 3663.183035][T32470] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 3663.185224][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3663.197578][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3663.203431][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3663.209275][ C1] protocol 88fb is buggy, dev hsr_slave_1 21:10:45 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0x0, 0x200000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe800000000000004c000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:45 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x5, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:45 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x90\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:45 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) ptrace$peek(0x2, r1, &(0x7f0000000080)) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0', [{}, {0x20, 'vboxnet0{\\-^'}], 0xa, "eb610dcecba161b9471192158b7d5f7929bf862557b6f5a1115aa29a5ed831883c49bce0f824"}, 0x3f) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) [ 3663.727310][ T418] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:10:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000060000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:45 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x6, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:45 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:45 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000068000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:45 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x25, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe800000000000006c000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:46 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0x0, 0x300000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:46 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x83, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000074000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:46 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:46 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/audio\x00', 0x40, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) r2 = socket$packet(0x11, 0x3ffffffffffffd, 0x300) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2) sendmsg$rds(r4, &(0x7f0000000a00)={&(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000180)=""/197, 0xc5}, {&(0x7f0000000280)=""/200, 0xc8}, {&(0x7f0000000380)=""/73, 0x49}, {&(0x7f0000000400)=""/54, 0x36}, {&(0x7f0000000440)=""/176, 0xb0}], 0x5, &(0x7f0000000940)=[@cswp={0x58, 0x114, 0x7, {{0x4, 0xfffffffffffff237}, &(0x7f0000000540)=0xffff, &(0x7f0000000580)=0x8, 0x0, 0x5, 0x3, 0x80000000, 0x0, 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{0x6, 0x4}, {&(0x7f00000005c0)=""/141, 0x8d}, &(0x7f0000000900)=[{&(0x7f0000000680)=""/94, 0x5e}, {&(0x7f0000000700)=""/249, 0xf9}, {&(0x7f0000000800)=""/233, 0xe9}], 0x3, 0x42, 0x3}}], 0xa0}, 0x20000000) sendmsg$nl_netfilter(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x2, 0x40000000000008, 0x319}, 0x14}}, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40046602, &(0x7f0000000a40)=0x7) recvmsg(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe18}, 0x3) 21:10:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe800000000000007a000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:46 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x60000, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000080)={0x1ff, 0x7fffffff}) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000100)={0x5e, 0x3}) [ 3664.865253][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3664.871393][ C0] protocol 88fb is buggy, dev hsr_slave_1 21:10:46 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:46 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x300, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:46 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe80000000000000f0000000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:46 executing program 1: r0 = socket$packet(0x11, 0x3ffffffffffff, 0x300) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x20000, 0x0) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000100)={[0x0, 0xf000, 0xd000, 0x5000], 0x2, 0xa2, 0xfffffffffc74a5c6}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="280125bd7000fbdbdf250c0008f4cb890400060000003420020008000400020000000800090040000000080002004e200000080009006000000008000b0002000000080002004e240000080006000100000024000300080007004e230000080007004e05000008000100030000000800030004000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f00000002c0)=0x1) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000300)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000380)="c201ab81a70add9622f3a3d408fa1af355d1b4da22c9c946ac0a85981acd93518410294b612b67136816a4b8a8379287a01c272afc786efdba616a045eb396a0479c7c3b28ffc8df498c9dbb087cb073f7792558e979f48712681c88d4e8", 0x5e}, {&(0x7f0000000400)="4a84f9ad4b31ba0b78cea78e7d8dbe4acb1b4d2b1150bc7a5990a19d53f17ffde4e0e30667d64b044b0958e558511ddb540b8d3f251733cf318a2b02171c4fed2d41983e7f62cf33695dd7a20a81808f8e7e804ed51e9bb383f9e4c6f2f2d89c813bf9dfee560a55bc80dda7290e0efb8f118b5e2d34525826ec691cdd2eff860dff996cf481000532e1093eeaada4d586d3ecb33e1497a5d4c8c8f51268b3bcdca1bd401509259b5d398f05a8f3e4b88500b663e00fda430105ceea0fce0c3ca2d127e0c94986603f093224c213ff8cc55137d519ee85d1c9796d15ed1e722edc04c0a48ffefadbca9432e2ca1b6de4617b59ab97b16fa97a", 0xf9}, {&(0x7f0000000500)="13d10af035847826c039959071ba021a174c952ae9e63af9ffab9fb8fc97820328d963d9278e5095bfa8ecf821eeb5f9f49d8ac541cc2f308d94ee7691d2ae4e0af2a799035a29251f29", 0x4a}, {&(0x7f0000000580)="e126741a8e130aa6307b4685c199820f4577b65bd54a485994718ef4b6dcd02c4a32", 0x22}, {&(0x7f00000005c0)="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", 0xfa}], 0x5}, 0x80) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 21:10:47 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0x0, 0x400000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000030000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:47 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x363, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:47 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000140)="373ff945b481dcd610f88900dbf417c0c4fb62b6ef371484010b86e9b5e0646f454703736371d4691c39f9527143c8adccef708b766725a9482f97e3acf596f78c096054e6e3dd2fcaca2ed808de5684c1f619c7fe982ee295071784fd7947a29b288ce06816575c9d97edfc096e1fa5378205dbaf36ada3eec4ce5b785f7244ca99dc7217f8c9a9d3bbfccea7f247a4b4", 0xfffffffffffffe66}, {&(0x7f0000000200)="cba9522416c7dd24b69539db0fc212ea0755de9e30f51e7e2ede49279c5bcb4d6e4aee4dad57da2738de4b", 0x2b}, {&(0x7f0000000240)="502f1310db07b1725453bf1f85520f46e82a", 0x12}, {&(0x7f0000000280)="3fb6e37ce65ca6a555f6b4478312279576fe2831c3df114b81a3bc00bb4620a758be8c4034a3", 0x26}, {&(0x7f00000002c0)="8f4874010f21328321b4b14e9c6c9bc42f17ef40b73e4641ce4fc7e556a86ced0dfea153413a4d76b358a62e6e483abe00", 0x31}], 0x5) write$vhci(r1, &(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, "a4e5b8be0b23ef9b3d83bc7c4d5852a5a031b5"}, 0x14) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x100, 0xfffffffffffffee5) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) memfd_create(&(0x7f0000000080)='md5sumsecurityppp1\x00', 0x3) 21:10:47 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000050000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3665.578244][ T2552] xt_check_target: 3 callbacks suppressed [ 3665.578265][ T2552] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:10:47 executing program 1: r0 = socket$packet(0x11, 0x1, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 21:10:47 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:47 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0xc00, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000060000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:47 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:47 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc9}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x10000, 0x0) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f00000002c0)=""/250, &(0x7f0000000180)=0xfa) [ 3666.008461][ T3217] validate_nla: 8 callbacks suppressed [ 3666.008469][ T3217] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:10:48 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0x0, 0x500000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:48 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x7801, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000070000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:48 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:48 executing program 1: r0 = socket$packet(0x11, 0x4000000000003, 0x300) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x6b3, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000080)={0x6}, 0x4) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) [ 3666.390018][ T3664] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:10:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000090000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:48 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x18cd0a, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3666.492517][ T3865] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:10:48 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe80000000000000000a0000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:48 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:48 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x1ffffa, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3666.900513][ T4203] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 3666.934651][ T4205] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING [ 3666.946922][ C0] net_ratelimit: 6 callbacks suppressed [ 3666.946932][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3666.946981][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3666.947066][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3666.947103][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3666.947211][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3666.947256][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3666.947332][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3666.947376][ C0] protocol 88fb is buggy, dev hsr_slave_1 21:10:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe80000000000000000b0000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3667.129250][ T4507] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:10:48 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0x0, 0x600000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:48 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1fc, &(0x7f0000000240)="816edd2eb0dea2488f51998a0540810cbf50d282ed2076bf283c8a83f30e318388eb1990b30cc78db87b07b4f1df9b2173248a9bfb7760ab02dbbe39ca3cd92f63cd5b2be6a80c3423b0ed93cd0b3f46758e20c7dc4f71c872152a893680df40726e37ec92df1ebd04e974e7f893e610a31e2cc21440b0ec86e0d363fc1f4718655a8b9eabb59048453fd4bcfba280880354ed507f74de5c1f239520e006c36658fd0c87f5d427701b24a736fb255dd216b36f22db38846ec5a3") r1 = socket$packet(0x11, 0x4000000000003, 0x300) r2 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2) getsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000100), &(0x7f0000000140)=0x4) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000180)) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000080)=0x5) 21:10:48 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:48 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x7ffffff2, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe80000000000000000c0000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3667.269263][ T4635] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:10:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe80000000000000000e0000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:49 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfe\xff\xff\a\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3667.355225][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3667.361127][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3667.426976][ T5031] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 3667.467443][ T5045] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:10:49 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:49 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x7ffffff8, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe80000000000000000f0000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:49 executing program 1: r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xa24d, 0x250600) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10410004}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r1, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x101, 0xad83, 0x46a8, 0x3f}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) r2 = socket$packet(0x11, 0x4000000000003, 0x300) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) recvmsg(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 21:10:49 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfe\xff\xff\x0f\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3667.886964][ T5261] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 3667.934296][ T5262] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:10:49 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000006c0)={0x0, 0x0, 'client1\x00', 0x0, "fdb918b40002f889", "672a5c75d76933a29a8d768577d2acab58f34395e606a7f274c7b72cec7346a0", 0x0, 0x0, [0x0, 0x700000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000110000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:49 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x7ffffff9, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:49 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000002100000088ac111b00000000ffffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000000000000000076657468300000000000000000000000626f6e645f736c6176655f31000000006772653000000000000000000000000076657460315f746f5f626f6e640000000180c2000000000000000000aaaaaaaaaabb0000000000000000ac000000ac000000d40000006c696d69740000000000000000000000000000000000000000000000000000001800000000e6ff072fd85e000000000000000000000000000000000072656469726563740000000000000000000000000000000000000000000000000400000000000000"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3668.147096][ T5583] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:10:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000120000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) [ 3668.194909][ T5584] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 21:10:49 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0xffffff1f, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3668.266591][ T5815] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 21:10:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000130000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:50 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 21:10:50 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0xffffc90000000000, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:50 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x19, 0x1, 0x164, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1b4) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:10:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="1400060002000000ffffffff000000000000000014000200fe8000000000000000140000000000aae9c0f2545ab9a6cdc4e7484f974c1b5579a73c32d1a8f03e12b25d11f095e59df74f4952e2f176c0abd968c7118e63015f2bca0f5d8137a292d5d237b088d1a7af46c29b7f5b462b356ec0aaabe40ec62bfc5a9d96583636e5c3"], 0x40}}, 0x0) 21:10:50 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x21, 0x80000) r1 = socket$packet(0x11, 0x4000000000003, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000000)=0x100, 0x4) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=@profile={'permprofile ', '/dev/input/mouse#\x00'}, 0x1e) [ 3668.867152][ T6315] ------------[ cut here ]------------ [ 3668.873452][ T6315] WARNING: CPU: 0 PID: 6315 at net/netfilter/x_tables.c:649 xt_compat_add_offset.cold+0x11/0x36 [ 3668.883889][ T6315] Kernel panic - not syncing: panic_on_warn set ... [ 3668.890507][ T6315] CPU: 0 PID: 6315 Comm: syz-executor.3 Not tainted 5.3.0-rc2+ #84 [ 3668.898529][ T6315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3668.908601][ T6315] Call Trace: [ 3668.911922][ T6315] dump_stack+0x172/0x1f0 [ 3668.916267][ T6315] ? xt_compat_target_to_user+0x3b0/0x3db [ 3668.922001][ T6315] panic+0x2dc/0x755 [ 3668.925930][ T6315] ? add_taint.cold+0x16/0x16 [ 3668.930902][ T6315] ? __kasan_check_write+0x14/0x20 [ 3668.936302][ T6315] ? __warn.cold+0x5/0x4c [ 3668.940648][ T6315] ? xt_compat_add_offset.cold+0x11/0x36 [ 3668.946563][ T6315] __warn.cold+0x20/0x4c [ 3668.950810][ T6315] ? xt_compat_add_offset.cold+0x11/0x36 [ 3668.956468][ T6315] report_bug+0x263/0x2b0 [ 3668.960817][ T6315] do_error_trap+0x11b/0x200 [ 3668.965424][ T6315] do_invalid_op+0x37/0x50 [ 3668.969844][ T6315] ? xt_compat_add_offset.cold+0x11/0x36 [ 3668.975480][ T6315] invalid_op+0x23/0x30 [ 3668.979635][ T6315] RIP: 0010:xt_compat_add_offset.cold+0x11/0x36 [ 3668.985881][ T6315] Code: 89 ee 48 c7 c7 e0 8c 2d 88 e8 6c 04 77 fb 41 bc ea ff ff ff e9 87 88 ff ff e8 08 64 8d fb 48 c7 c7 20 8d 2d 88 e8 50 04 77 fb <0f> 0b 41 bc f4 ff ff ff e9 01 8b ff ff e8 ea 63 8d fb 48 c7 c7 20 [ 3669.005579][ T6315] RSP: 0018:ffff88808f7078d8 EFLAGS: 00010286 [ 3669.011676][ T6315] RAX: 0000000000000024 RBX: ffff888216514bd0 RCX: 0000000000000000 [ 3669.019672][ T6315] RDX: 0000000000000000 RSI: ffffffff815c5216 RDI: ffffed1011ee0f0d [ 3669.027657][ T6315] RBP: ffff88808f707908 R08: 0000000000000024 R09: ffffed1015d060d1 [ 3669.035898][ T6315] R10: ffffed1015d060d0 R11: ffff8880ae830687 R12: 0000000000000014 [ 3669.043964][ T6315] R13: 0000000000000090 R14: ffff888097d323c0 R15: 0000000000000000 [ 3669.052234][ T6315] ? vprintk_func+0x86/0x189 [ 3669.056833][ T6315] ? xt_compat_add_offset.cold+0x11/0x36 [ 3669.062485][ T6315] ? xt_request_find_target+0x68/0x110 [ 3669.068042][ T6315] compat_copy_entries+0x10e9/0x1340 [ 3669.073346][ T6315] ? compat_table_info+0x670/0x670 [ 3669.078653][ T6315] compat_do_replace+0x3b3/0x680 [ 3669.083686][ T6315] ? refcount_dec_not_one+0x1f0/0x1f0 [ 3669.089223][ T6315] ? do_ebt_set_ctl+0x110/0x110 [ 3669.094078][ T6315] ? refcount_dec_and_test_checked+0x1b/0x20 [ 3669.100064][ T6315] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3669.106320][ T6315] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3669.112590][ T6315] ? ns_capable_common+0x93/0x100 [ 3669.117640][ T6315] compat_do_ebt_set_ctl+0x22f/0x27e [ 3669.122949][ T6315] ? compat_do_replace+0x680/0x680 [ 3669.129291][ T6315] ? wait_for_completion+0x440/0x440 [ 3669.135716][ T6315] ? __fget+0xa3/0x560 [ 3669.139790][ T6315] ? mutex_unlock+0xd/0x10 [ 3669.144300][ T6315] ? nf_sockopt_find.constprop.0+0x226/0x290 [ 3669.151503][ T6315] compat_nf_setsockopt+0x98/0x140 [ 3669.156615][ T6315] ? compat_do_replace+0x680/0x680 [ 3669.161725][ T6315] compat_ip_setsockopt+0x106/0x140 [ 3669.167086][ T6315] compat_udp_setsockopt+0x68/0xb0 [ 3669.172242][ T6315] compat_sock_common_setsockopt+0xb2/0x140 [ 3669.178135][ T6315] ? udp_lib_setsockopt+0x9a0/0x9a0 [ 3669.183347][ T6315] __compat_sys_setsockopt+0x185/0x380 [ 3669.188898][ T6315] ? sock_common_setsockopt+0xd0/0xd0 [ 3669.194270][ T6315] ? __compat_sys_getsockopt+0x2c0/0x2c0 [ 3669.200003][ T6315] ? __ia32_sys_clock_gettime32+0x16d/0x240 [ 3669.205913][ T6315] ? __x64_sys_clock_gettime32+0x240/0x240 [ 3669.211751][ T6315] __ia32_compat_sys_setsockopt+0xbd/0x150 [ 3669.217570][ T6315] do_fast_syscall_32+0x27b/0xdb3 [ 3669.222601][ T6315] entry_SYSENTER_compat+0x70/0x7f [ 3669.227713][ T6315] RIP: 0023:0xf7fee9c9 [ 3669.231815][ T6315] Code: d3 83 c4 10 5b 5e 5d c3 ba 80 96 98 00 eb a9 8b 04 24 c3 8b 34 24 c3 8b 3c 24 c3 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 3669.251436][ T6315] RSP: 002b:00000000f5dea0cc EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 3669.259955][ T6315] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 3669.267931][ T6315] RDX: 0000000000000080 RSI: 0000000020000300 RDI: 00000000000001b4 [ 3669.275916][ T6315] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3669.283908][ T6315] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3669.292170][ T6315] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3669.301243][ T6315] Kernel Offset: disabled [ 3669.305680][ T6315] Rebooting in 86400 seconds..