8ccb73b691dbcaec3711bdc284258df18a1d0611db15053a352f65e94359d2b76b07749a4f3989ad033f888334121b84d"]}], 0x4924924924924b3, 0x0) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="ac1414aaffffffff00000000010000fa0a010102"], 0x14) sendmsg$NFT_BATCH(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000090ac9df00000000000000000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000f08000600001100010000000000000000000000000a00"/124], 0x7c}}, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r4, 0x10e, 0x8, &(0x7f00000001c0)=0x3d8d, 0x4) 02:21:48 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "080002000000000008ff43944eeba71a4976e252922cb18f6e2e48ba000000012e0b385404b03ae96d09800000000000000101013c5811039e15825527ecba66fd767ce7a7f6e1b6b408561839ede6dd248a00000000000000000000000000000006ad8e5ecc326d3a09ffc2c6540200e4f200"}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8}]}], {0x14}}, 0x7c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'}) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) sendmmsg$inet(r0, &(0x7f0000002840)=[{{&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @multicast1, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0x40}}, {{&(0x7f0000000200)={0x2, 0x4e21, @empty}, 0x10, 0x0}}], 0x2, 0x0) 02:21:48 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a000e000200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) 02:21:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x74}}}, 0x24}}, 0x0) 02:21:48 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000100)={0x3, 'vlan0\x00', {0x1}, 0x7f}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x34, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, r5, 0x1}, 0x14}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4c261004}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r5, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4050}, 0x11) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'ip6gretap0\x00', &(0x7f0000000000)=@ethtool_flash={0x46, 0x0, 'h+\x82\x0e\xed\x9f5\xbc\x82\xc90t\xe7\xc4\xbd\x98\xac~\x83\x92 \x89\xd2\r\x94k\x13\xd7re\xc4\xa1\xe6\xc7\xbd\x90J!\xf0\x88U\x9d\xbc]\xf4\xd5\x80!%\xdbP\x9d\x14h\xd4//\xd6$\\\xa6OP\xf9\xecf\xe4\xfd\x86\x10\xa4\x8d\xc8\x86\xe60\x97\x11M\xb7\x89Yr\x17\x82\x11\xf5\xcd`5\xeb\xa2L#\xc0\xcaU\xfe\xfc\xc5U\xbbO\f73\'\xe4\xdc`\x97\x8d\x9c\xa9\xc7j\xd8F4`:b\x8c)\xb1;\x84H'}}) 02:21:48 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r1, &(0x7f0000000140)={@val, @void, @eth={@link_local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4b549f", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}}, 0x4e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socket(0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="5e2d9eac000000000000be03000000000000030000000013000000000000006574683a64756d6d79300000000000"], 0x34}}, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r5, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x9}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x814) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r5, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x10001, @link='syz0\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000040}, 0x8010) 02:21:48 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0011000200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) [ 3051.920267][T18433] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 3051.959632][T18443] netlink: 'syz-executor.2': attribute type 9 has an invalid length. 02:21:48 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000100)={0x3, 'vlan0\x00', {0x1}, 0x7f}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x34, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, r5, 0x1}, 0x14}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4c261004}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r5, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4050}, 0x11) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'ip6gretap0\x00', &(0x7f0000000000)=@ethtool_flash={0x46, 0x0, 'h+\x82\x0e\xed\x9f5\xbc\x82\xc90t\xe7\xc4\xbd\x98\xac~\x83\x92 \x89\xd2\r\x94k\x13\xd7re\xc4\xa1\xe6\xc7\xbd\x90J!\xf0\x88U\x9d\xbc]\xf4\xd5\x80!%\xdbP\x9d\x14h\xd4//\xd6$\\\xa6OP\xf9\xecf\xe4\xfd\x86\x10\xa4\x8d\xc8\x86\xe60\x97\x11M\xb7\x89Yr\x17\x82\x11\xf5\xcd`5\xeb\xa2L#\xc0\xcaU\xfe\xfc\xc5U\xbbO\f73\'\xe4\xdc`\x97\x8d\x9c\xa9\xc7j\xd8F4`:b\x8c)\xb1;\x84H'}}) [ 3052.022860][T18433] device  entered promiscuous mode [ 3052.026899][T18451] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 3052.351680][T18451] device  left promiscuous mode [ 3052.388876][T18460] __nla_validate_parse: 5 callbacks suppressed [ 3052.388887][T18460] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3052.446556][T18471] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 3052.455601][T18433] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 3052.475193][T18444] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 3052.484479][T18451] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 02:21:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x7a}}}, 0x24}}, 0x0) 02:21:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)={0x58, 0x140d, 0x8, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400070500000040e4a1a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000df0b0000040036d86c9c07d9606f10fe6966ed6680055264f94771d84495bfdf6537e3a2bcbd0f61dc2bde0468677ce2112381a056cb7dd2cebbdf177dca91bb49da539d265af08ede446f99b88aa25990294cf3ef5c00b1382ac504a8ddacbff13b9effadadb45439bc2490779df7ae380a33f6a2cf"], 0x38}}, 0x0) ioctl$SIOCGETNODEID(r4, 0x89e1, &(0x7f00000003c0)={0x3}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000090ac9df00000000000000000000000008000540000000280903010073797a300000000008000a40000000000900020073797a3100000000080003400000000f08000640000000000800074000000000140000001100010000000000000000000000000a"], 0x7c}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000380)={r6, 0x80, 0xbba, 0x5}) ioctl$PPPIOCGL2TPSTATS(r7, 0x80487436, &(0x7f0000000480)="839c91dd2232764c7b13b0c64c626c18bb972f25a3812be2b8512584db166249534e9cb9ec5f600c36f7da395b3cc1ad5dbf2e4b56") sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@TCA_RATE={0x6, 0x5, {0x4}}, @filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x50}}, 0x0) [ 3052.532357][T18433] device  entered promiscuous mode [ 3052.549624][T18444] device  left promiscuous mode 02:21:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='memory.events\x00', 0x275a, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="5b8fdf8938f0d3ae5ba3c8d2db392a0027685460a46bfc38b6373cb4c4e251266323b9b70b1c2d981e03ba5f0534005e091d0c953ca6547e16ef71a545bfa9bd5093fe96fb0a6b7b69d2b01af03d2bb908f9bdbf3c8b914ba3ed822ab682f988fbded76808d5be8235b1a500000000000000723e9085e965af69e78f00"/152, @ANYRES16=r4, @ANYBLOB="f1b52639fcaa47fd1919002dbd0300fffffff7000000000800010000000000000028b825f7d524a7056c08fb7ffe3eda00"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r5 = socket(0x23, 0x2, 0x3ff) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=[@iv={0x0, 0x117, 0x2, 0x0, "15dc91768c78ba00960b7a5e4e7907526d7c7c8aee968a562b00cb905e1826a8f9ee0ac480576a7134801fc070041984c5c23fa0f93b59075853f70545ce9c61b15ff65cde5078b4209217f0220f0810f739bd470d405272edb16434a11869d08d8fef065de94710ee553b410c3c02a96c156836af8d11c4af4a77e766f9ed8ec43830fe02bb22babf9b41d4e5027b49ba3f720465bf4ee9b63892030f4fea97d94bc6cd1a7d4d6869cb3185e5da3ca0da"}, @op, @assoc, @assoc, @op, @op]}], 0x4924924924924b3, 0x0) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x8084}, 0x4811) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') r8 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x3c, r7, 0x536ae464467e3e0b, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}]}, 0x3c}, 0x1, 0x6000000000000000}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x240, r7, 0x8, 0x70bd27, 0x25dfdbfc, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x3f}, {0x5}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7ff}, {0x6, 0x16, 0x6}, {0x5}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6}, {0x5}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x9}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0xffff}, {0x5, 0x12, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5}, {0x6}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x9}, {0x5}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x3}, {0x5, 0x12, 0x1}}]}, 0x240}, 0x1, 0x0, 0x0, 0x10}, 0x80) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_TIOCOUTQ(r9, 0x5411, &(0x7f00000001c0)) [ 3052.727556][T18481] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3052.764073][T18494] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3052.819984][T18484] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 02:21:49 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x2, 0xf5, 0x6, 0x401}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8}]}], {0x14}}, 0x7c}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) bind$tipc(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_DATA_LEN={0x8}]}], {0x14}}, 0x7c}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x0, r3, 0x6548879a, 0x2, 0x9, 0x2}) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2e}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x3}, @NFTA_SET_DATA_TYPE={0x8}]}], {0x14}}, 0x98}}, 0x0) 02:21:49 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = accept$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000180)=@req3={0x4, 0x3, 0x0, 0x2, 0x7fff, 0x0, 0x10000}, 0x1c) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r1, &(0x7f00000001c0)={@void, @void, @eth={@link_local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4b549f", 0x5d, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"95e45d5e325352dfafad588cf4cf8c5e2860a83dad02218f145c2d3f6edcc2f8f4d91843fc0b5a0568d462595d56f01e7b19868d016985dde6c2c947a98f7f90e2d3242ccc43d941be"}}}}}}}}, 0x93) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socket(0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) [ 3052.863537][T18485] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3052.885659][T18489] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3052.930034][T18490] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:21:49 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0012000200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) [ 3052.993092][T18489] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 02:21:49 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x8) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x8) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)={0x0, {{0x2, 0x4e20, @empty}}, {{0x2, 0x4e20, @private=0xa010102}}}, 0x108) r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0x8) r6 = socket$netlink(0x10, 0x3, 0x4) recvmmsg(r6, &(0x7f000000e180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) [ 3053.078850][T18484] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 02:21:49 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0013000200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) 02:21:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 02:21:49 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x8) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x8) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)={0x0, {{0x2, 0x4e20, @empty}}, {{0x2, 0x4e20, @private=0xa010102}}}, 0x108) r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0x8) r6 = socket$netlink(0x10, 0x3, 0x4) recvmmsg(r6, &(0x7f000000e180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 02:21:49 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x17, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61, 0x0, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [0x61], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={r0, 0xfd, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x1a, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000024eaff0ff2a4d129e62b2c18850c5c7cb99877460474f3f47dd3a081ba9d8f470c09c0d22477fe43dc05a69a58b33247639e5c0b81ab97187fc4077f56ab7379ce6cadfb9373ba97170f92ebb35915c433cbb96defbb032e92621f0638e551101666fd4fcd41cbc1d35133cfc9e2e486a82187587280218be365d33090"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, r0}, 0x74) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r1, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x7, r1}, 0x8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x10, &(0x7f0000000380)={&(0x7f0000000240)=""/105, 0x69, r2}}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="ff000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104000400"/20, @ANYRES32=r11, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) 02:21:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xf0}}}, 0x24}}, 0x0) 02:21:50 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000), &(0x7f0000000040)=0x10) pipe(&(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000002f00)={'tunl0\x00', &(0x7f0000002e80)={'gretap0\x00', 0x0, 0x20, 0x80, 0x8, 0x10000, {{0xc, 0x4, 0x0, 0x21, 0x30, 0x68, 0x0, 0x4, 0x4, 0x0, @loopback, @loopback, {[@timestamp={0x44, 0x1c, 0xbf, 0x0, 0x3, [0x20, 0xfffffff7, 0x7fff, 0x9, 0xfffffff9, 0x9]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000002fc0)={'ip6tnl0\x00', &(0x7f0000002f40)={'sit0\x00', r3, 0x29, 0x3f, 0x2, 0x200, 0x0, @empty, @private1={0xfc, 0x1, [], 0x1}, 0x700, 0x1, 0x1ff, 0xffffffe0}}) connect$nfc_llcp(r1, &(0x7f0000003000)={0x27, 0x1, 0x2, 0x4, 0x3, 0x3, "c4178234225ab60df2d921c104fdc8f83e4d034366504b0d65d25786405943209a62613e3921e393daecef51120bfbc009a7222cf373473ed919649bfb5295", 0xd}, 0x60) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000003080)={0xffffffffffffffff, 0x51, 0x1, 0x1}) epoll_pwait(r4, &(0x7f00000030c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f0000003140)={[0x7]}, 0x8) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000003180)) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r4, 0x111, 0x5, 0x101, 0x4) pipe(&(0x7f00000031c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000003200)={0x0, @in={{0x2, 0x4e22, @multicast2}}, [0x80, 0xff, 0x3, 0x534d0b34, 0x1ff, 0x8, 0x800, 0x10000, 0xd9b8, 0x81, 0x64f, 0x73, 0x3, 0x5, 0xffffffff]}, &(0x7f0000003300)=0x100) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000003340)={r6, 0xc4, "f0c0f07e3fadd2673e0c852413e5b64ed2404ab65352808cafaf43c83c3cc82e72593800714e58ab0c05f5e384a870ffe967daf7bb82e368f0ce89afd07c0d585454980903018f5601080241b788ce04202c9d856fccdb84dc6447289f04fd0492f10e5eef0da60198228466a793e4c9a08ec867b15a0b5ba6848c30fdbe14d9a2099a15665d48755d1ff0484ced8f55fe8104a2c6382d552e2085ceed4508a0602c40c31bd41bf1c1751b7c595165c64c26dec2d1271e8b2a2f2718f5d9943fbd519fe0"}, &(0x7f0000003440)=0xcc) r7 = socket(0x0, 0x6, 0xc56) setsockopt$inet6_MRT6_DEL_MFC(r7, 0x29, 0xcd, &(0x7f0000003480)={{0xa, 0x4e21, 0x7, @private2, 0x5}, {0xa, 0x4e24, 0x8, @local, 0x7}, 0x20, [0x1000, 0x7fffffff, 0x4, 0x1, 0x2, 0xfffff000, 0x2, 0x1ff]}, 0x5c) recvmsg$kcm(r0, &(0x7f0000003680)={&(0x7f0000003500)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000035c0)=[{&(0x7f0000003580)=""/27, 0x1b}], 0x1, &(0x7f0000003600)=""/69, 0x45}, 0x40010042) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f00000036c0)={0x1, 0x0, 0x0, 0x7}, 0x8) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MPATH(r9, &(0x7f0000003800)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003740)={0x44, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @local}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0xc004) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000003880)) [ 3053.725847][T18550] 8021q: adding VLAN 0 to HW filter on device bond14 [ 3053.776703][T18590] bridge374: port 1(macvlan3) entered blocking state [ 3053.800415][T18590] bridge374: port 1(macvlan3) entered disabled state 02:21:50 executing program 3: socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket(0x10, 0x803, 0x0) socket$inet(0x2, 0x80001, 0x0) socket(0x11, 0xa, 0x0) socket(0x10, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000004040)={&(0x7f0000003d00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000004000)={&(0x7f0000003d40)={0x2c0, r3, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xf8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20f0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe1bc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7dd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}, @TIPC_NLA_NODE={0x12c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "b348eb9f5477d5349dfed007daaadfb923ba08a779817ee3f5504900e165412bf99323ef"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xb2, 0x3, "9bfa4c8fb54fef0b4860fb68f596fa479b1ca7716944ed0ba4c3eb97a1c64408e885c4b7cc94357ae254acc2cb180d54a08713c036553855bbf4bf3e1ae382ec0ae5803ce8288b2339a5d38a9df2bd0094545189b3562671d6a9113ff44ead14c452d6fde84c4e926cb575425e5a443dc997fc9c33ead68719a4ae8f2831728fa6cb017939e6f0622b72aac5247f30b85f87c768cc8f5a9c142c7b05f8742f174ce1ed5be389fe5de99c5af53881"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x19, 0x3, "e1cf250d354c766bf1cf14b438436a546caab3f0d9"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1000}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8000}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x400}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8cc}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x6, @private2={0xfc, 0x2, [], 0x1}, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040080) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x203}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x58}}, 0x0) [ 3053.833999][T18590] device macvlan3 entered promiscuous mode 02:21:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 02:21:50 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r1, &(0x7f0000000140)={@val, @void, @eth={@link_local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4b549f", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x2}}}}}}}}, 0x4e) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="2400000000c468048d84bd91a24aea23effa6f63d0a1ca24cc7134a420c0eca92287bb9073d766ec5ef6b5e00c533d25dcd88bd5d2b4022de45379a9b9b80d07e49cbdfffc1bd892482280275e7737d8da969e12a84b2c615b92adc599747243188049271e4b39a516d7092ec9ce2da61573a89f1659a539028b6ba67978d7b9a15f4e7cc6b33dc5c3bd270e0b61a40e3df73a", @ANYRES16=r6, @ANYBLOB="0f0000000000000000000f00000008000300", @ANYRES64, @ANYBLOB="00000000004000d38e080000005524b26c78e7870000800000000000e48b3450d74fbe3baaa6d811307d710000000000007d6900"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r6, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2400c000) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socket(0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(r7, 0x0, 0x10000000) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 02:21:50 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x17, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61, 0x0, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [0x61], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={r0, 0xfd, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x1a, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000024eaff0ff2a4d129e62b2c18850c5c7cb99877460474f3f47dd3a081ba9d8f470c09c0d22477fe43dc05a69a58b33247639e5c0b81ab97187fc4077f56ab7379ce6cadfb9373ba97170f92ebb35915c433cbb96defbb032e92621f0638e551101666fd4fcd41cbc1d35133cfc9e2e486a82187587280218be365d33090"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, r0}, 0x74) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r1, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x7, r1}, 0x8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x10, &(0x7f0000000380)={&(0x7f0000000240)=""/105, 0x69, r2}}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="ff000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104000400"/20, @ANYRES32=r11, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) 02:21:50 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x17, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61, 0x0, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [0x61], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={r0, 0xfd, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x1a, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000024eaff0ff2a4d129e62b2c18850c5c7cb99877460474f3f47dd3a081ba9d8f470c09c0d22477fe43dc05a69a58b33247639e5c0b81ab97187fc4077f56ab7379ce6cadfb9373ba97170f92ebb35915c433cbb96defbb032e92621f0638e551101666fd4fcd41cbc1d35133cfc9e2e486a82187587280218be365d33090"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, r0}, 0x74) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r1, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x7, r1}, 0x8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x10, &(0x7f0000000380)={&(0x7f0000000240)=""/105, 0x69, r2}}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="ff000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104000400"/20, @ANYRES32=r11, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) [ 3054.493948][T18700] 8021q: adding VLAN 0 to HW filter on device bond15 02:21:50 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0018000200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) 02:21:50 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x48, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c638c0d0424fc60040010000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x800, 0x1f) socketpair(0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x29, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000100)=0x1, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$SIOCGETNODEID(r3, 0x89e1, &(0x7f0000000140)={0x1}) sendmmsg$inet(r2, &(0x7f0000006b00)=[{{0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000000540)="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", 0x595}], 0x1}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000002780)="89", 0x1}], 0x3e8}}], 0x2, 0x4004150) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000a40)={r2, r4}) close(r0) [ 3054.610519][T18745] validate_nla: 4 callbacks suppressed [ 3054.610529][T18745] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 3054.693556][T18742] 8021q: adding VLAN 0 to HW filter on device bond8 [ 3054.703634][T18781] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 3054.739439][T18782] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 02:21:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x204}}}, 0x24}}, 0x0) [ 3054.787003][T18700] bridge375: port 1(macvlan4) entered blocking state [ 3054.817521][T18700] bridge375: port 1(macvlan4) entered disabled state 02:21:51 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0028000200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) [ 3054.866962][T18700] device macvlan4 entered promiscuous mode 02:21:51 executing program 4: r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=[@iv={0x0, 0x117, 0x2, 0x0, "15dc91768c78ba00960b7a5e4e7907526d7c7c8aee968a562b00cb905e1826a8f9ee0ac480576a7134801fc070041984c5c23fa0f93b59075853f70545ce9c61b15ff65cde5078b4209217f0220f0810f739bd470d405272edb16434a11869d08d8fef065de94710ee553b410c3c02a96c156836af8d11c4af4a77e766f9ed8ec43830fe02bb22babf9b41d4e5027b49ba3f720465bf4ee9b63892030f4fea97d94bc6cd1a7d4d6869cb3185e5da3ca0da"}, @op, @assoc, @assoc, @op, @op]}], 0x4924924924924b3, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000240)={'filter\x00', 0xc0, "650eeed43c5b8a418eebac907e96e4940112a762ce5e4ce30a81c46081508058785b44391869cdc6988c83f112137876294a3efb34a5ed2573f3fb96a35ea5bb86f59813f8052971a0a16930c281df5921fd2aa2a6260e2f36cae8823d826642b0bf36fd32233bcf70573459049fe819dec4305305ea93daf340d4f769d4087703f57e64fa8195ccb4ec5b7864a46a196612ad46a884e0b6797fa252609ebb16a14f87e142dda368ff033debf9d230fbb81a7ba00af890aa2e3c32898bdc92a1"}, &(0x7f0000000100)=0xe4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0xc}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendto$inet6(r2, &(0x7f0000000340), 0x0, 0x20000001, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="ffef00000000000008000d00", @ANYRES32=0x0, @ANYBLOB="2200bd0000208000"], 0x30}}, 0x0) [ 3054.960142][T18783] bridge66: port 1(macvlan5) entered blocking state [ 3054.982242][T18783] bridge66: port 1(macvlan5) entered disabled state [ 3055.020780][T18783] device macvlan5 entered promiscuous mode 02:21:51 executing program 1: syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="13000000", @ANYRESDEC=r0, @ANYBLOB="050000000000000000001200000008000300", @ANYRES32=r1, @ANYBLOB="8bfe649baf5a46059e3be1104a37593bcd07e2b8329683c3c7f37dbdb4d47359365add175045f4c1b5d91228bb3bd7d7ec9beb95b6def82a92f73226d64979a5bafb548e27f9af54eae2636178560d9e412eea65a4464e5a317c7dde93075ca75002a478fe4e951da29d1f342e6a987a44eedd05b8ff598ba4cb0d70d96ce07cb97ca6cfe3a1e87fe73220f71b74eeaea53e6e0a5daf57296cf42147d92bbf68038508e755c941f592"], 0x1c}}, 0x20000) r2 = socket(0x400020000000010, 0x2, 0x0) write(r2, &(0x7f0000000100)="1f00000013000d0000000000fc07ff1b070304000d00000007000108010039", 0x1f) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r4 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x8, 0xffffffffffffffff}, 0x8) write(r4, &(0x7f00000002c0)="1c0000004a005f0014f9f407000909000a0080000002000000000000", 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000340)=0xff, 0x4) socket(0x1000000010, 0x80002, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$sock(r3, &(0x7f0000000240)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x3f, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1c}}, 0x7, 0x4}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000003c0)="23f02e7720cb1971d3f3cf14d39c46663df91c7be8bc40566d4f621e823f4a89621271367e16830286d36b6cf627d257727d2f1417c49eb60bbffdb3a803032b04d889cb71c8ea5cba90bc60a4637fa911d1988e9dc4f1716843218870990476911f6af967", 0x65}, {&(0x7f0000000c80)="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", 0x1000}, {&(0x7f0000000440)="6f188546f84743f87f33e7104802d7d2a26a4ece1c927831ac0e3adcf66afe7de06fe1b10518b67d7ec8f60939dfb00f9456059da556169d5315233cb531bb27cae289ed17858ccb34fd26fbf3fb93e0d32f43ab450c7da2951d9a228abda7310f770cbbfab6901b4d432c70ff44bb9c997cc0b6e4997002782f23d12e45949a9fdc4ff8b48421f5aba5b50a05da914f4f577af25af897dbbb690d3d5e3edf0a64a53f505ab34c4f7ecba6", 0xab}], 0x3, &(0x7f0000000500)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x40}}, @mark={{0x14, 0x1, 0x24, 0x8b7}}], 0x78}, 0x8040005) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) connect$llc(r3, &(0x7f0000000380)={0x1a, 0x1, 0x22, 0x0, 0xfc, 0x38, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000680)={0x0, 0xd8, "ab79ceb019f2a4e305eaa9a23cb275b365f8133129434e9293728dce4c7ade08b4ea2996971a7789016920c2880c1b7c15e555e8edb80a3f3877f0909e37876ca5320d701fbc693077a621e00d56559e79096d3e3e00286f8a7934e4ca855e58422d32afcdcea5a50a65d96076cf3234238bb5fd0425598020f541852d93fa56034e744351f75c03ec767b9e9283f7b76511dac71df725f9d176582edb6082e83b0710bc7f389159d66b9171b9c9852990937200598d8f1f9fc145836b824af6642f77171ca5e074a6887e7de5c1302c3c4ad3bd14faba7e"}, &(0x7f0000000040)=0xe0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000200)={r6, 0xffffff81}, &(0x7f0000000780)=0x8) 02:21:51 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8}]}], {0x14}}, 0x7c}}, 0x0) sendmmsg(r3, &(0x7f0000005b00)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000001c0)="a4ae2b0ce08497a005d76ecbe6fb861e9a0eb23ac59d5db99ae64e1d84b887a22313aaa84ff1724cd605fe1e6ed8512a74957ac7966bda9db24e7ee7f8a96da28536531fa5bab6e2407c3a4aaebc306fc45d402450a3a45a5fb61b8126a398be3f01c780dcc2aaa1239cf9b65ca9ca473bbeda21abba17a5fe2b28a0393e09f3b483500464e6b99249a2ce1c8d4f543497a583971365f3dc1fe07fc04a08abbc8e998a0343c9b5fd5958539b854365e44cf43f90", 0xb4}, {&(0x7f0000000280)="c023977b57c99ccead76316f4d09669c07141b15930119d58f67462c877ea3ae068eb75de3acf76b7243b48f9c0e220c1e64c9b74530132babd995befc36db6a43f303d1f528d16cf8a064d28a3f412f7913fd93393ae01550c2d969b7c82417ed6339412b6090741a8e", 0x6a}, {&(0x7f00000000c0)="fc884727ba8d032cfe8186c9f9d07bd1d35f1bd7a1c73e32bc05119c91a35e3045719933596b6b3b", 0x28}, {&(0x7f0000000300)="61755142d6b2c6f8f2512ab78cfde5cbf50f4ff87da046203d958a3ad242a9c2a81befc1eb87aa6b15524913f8feadccd1fdfc918675eca88367f9ede560b0945e09b4ec83a95f5c719d650d29ab645305dc304cf211a67583b9a2aeff3ee9dcce544af9636ee46dada9565b6e166bcb207e2c293c39f71377b2276cc364facc557d9762ea68cbab8f134f00265fd2c11035616e2e88dc2f208a0094f2c621cc38", 0xa1}, {&(0x7f00000003c0)="7c4e0d7223f9d603c8da4ef5d9b01f2ec8dffd145ebaec8a043435782b88d249a02eb6dc927adb3e9eab0a00359c36a35d237285937646eb63e1ee74098b8277b00085aef2e834ce41d03b88289e7cde68601b0901755e699ebdd9206875f15a835e2d1324046225eea5a42f450fa05e225b4a67fecabff69d8883046503c189bd1bfd00bb24e3a8bf8bc94ce5bbc59711ddf9f7421b516782d14fd7416678c327f250895bd1e5e0e58ecd5219955cd3923e", 0xb2}, {&(0x7f0000000480)="eed7afbce5dcd317631c559d95b501d539d523d5a2d7a81bd01bcbd6261886904aa20cb817e0b206df594dd4f6519c12a3dbc7a6026ded81d9ce9cc7d0225df531e26c8d76b30759b6b9f982947bb94e000ac1defa72de5bd29ec3f546030bcc7c4d71890c3f3341ceefafe9644abd38f5364453a003e2ef5cf81f5207cabdf0ae8f6e40b7819a677cc9be2100d179144ad329975a4d60b8bd1a1f85", 0x9c}, {&(0x7f0000000540)="12bc9f79fe54fce762bd5c791544ca5efc054754926f2ad1c0cc477c9ac48ea72722989c60cfbaf5f21f795826477338cb380cea562efc9d921d48ea86466225ba48270fa741129245b637976a71f8d0980a5a842387e2eb68e5c5a909998b84e3c73d209b60302fc86bd7338658365293c7a564aca2b0d1e2675b99f5e3b6f2966074a8657e6480c40a92065281922dd8d95e9b0b65e4b1b00370dfc3c09ed4040c90", 0xa3}, {&(0x7f0000000600)="97ccf635c65146262c93fb5a3f0b17f1c9b9e38a02ab0a290aff73f1ae0900c8d74032a6cc0131dab3b0b422d8bb87f5d860b16df72be9e178c2706062faa94e6d596087bfe2871eb25ad140aeb6cd127891d0c9eaf846", 0x57}], 0x8, &(0x7f0000000700)=[{0x88, 0x10a, 0x2, "70976d9345309de8bf68544c49d59781ec255912582919e98f4b89c7e855599216e7aa50a12121026136486acff09128c3d67b99cc06ae11236fcc45a206291594f8eb0bf4550dee1768e0e2c93a31c2959ff7867afa46f773f842fda84b61593f480737acb08946ec2cc64090763f69c9fa8ed0c0341c53"}, {0x108, 0x111, 0x0, "e371177a0833342fcb4a3b89a2a3e44b78d4492a41e06c5a3c251828c698d2134afaa6e9ed754ff5aab16153095890a669c981d209fcf0f4c4e11cffdf9f41c02adf38481484abd770f3104e71a2284a6044fa572f90d368a7df3f0abbcc223b7d8a654b2808fc163bee332e2386b2a97ca78cb3ad3b2d8119d14889c26d8cc1b77ff10dd5bdc061968358113c65dd719e11adeb5a497493808ba48731d68aa3d0901f4f2de3eb8caad8b152b168ee750e92cfb170a1edc905376c5be6e5d74d12e051813bbbca1aa55bc443351acbf8af0711ad6815bddcc92cf88d3baae3c2e577ff8d4b05686cce6917a8d5da0d96ded3d3"}, {0x50, 0x2e, 0x8b63, "341d8f765f17199eba3e8aaf7446c2110072210d14dc1c10dfa3ae65674f46a50bddd2d0315d982ec1e40a88d67f24721d398690b1c6f9fc9126"}, {0xe8, 0x11, 0x4, "83f7b3c13fadf07a02105835fda254c323ba78391d59f23af5b71958e2b0ea7f8dc10f8196f50c506094e33224f9806aaddf3d7701ccbec52df63afd5b4b34cc9696c12a70a016d68597a2c82924136e409122533485a7e13e4df431f99cb31bb7026541f18149d73159e60a5f70343987a0cfdfd27e683eb3655bd50057532de3073e16f52f472b73f2a119d434dba3ad10284defd116bc6207b261ade4b394bd3cecfe608fd8d4cc51c128fb2d907f2baeb7ffd534572bb7cb71c7ab598f3d8a0e08b79d90990a5a13f0f650c9157a82546c278c"}, {0x28, 0x105, 0x8, "19938fd66208529bf062109aa7fe4b26d907"}, {0xf0, 0x10e, 0x80000001, "e634156171fb164f4f6924e546b89a4c39914ec86769ca3c47e024a9ce5b93bfa046390f9b8fc1635e395e9532dd3281a948bc93d7bbb66b846b5b450a4644852e51101016a9bf4a0bc9afb9f2d856fc3beb758cc176fa738524c2adf68ab3179ac63bb9a0d51daa63157a49e62c333cb568d556358dcb8d198a46ee6d48193983f6e7e304485c9280b995bfcd37a35ec3c4e0ef9b873024cbed078d0a76f92a109ab9144c21d5384a1a8a50e29357e8dfbb3d388dcc0b4d8e73c4617729727aad967ff4394087b146d544f4bc02de22923f668b9def5939d94b63"}, {0x108, 0x114, 0x58c5dc3e, "e665475c6a7a810f40f5dc7906d6f05358045d3079b250d425336fe5b1e14257fa0b52feea8c1c9dd775176afd683f8d64da0eb381ecb7dcb0f166e2052308c6f7556b6be05c06e0ad5b152bac6e6412c3a1aedcd7e81053797a1a2b057c9a760d42da6a7c637e0cbf03d70a123ae682c168517e9a21ce96106e6d4083b5a764ff27d3062b88566b5eeaf531d9f3769c9e0b32633e0ee42734f59666b724c19969eadad1a06d13baeda3c7207c49285145e78cfaca93ee92905b76b0c6f7d03ba1729f30d3a01e3e7fda4a369f555ae02b59d844148cf39bfb72409ecfbd8d9765a51d478189e3afe71e1fc4181305198589aa4f91"}, {0xa0, 0x110, 0x2, "8005bf56c61943e9152891f19b7f4b4feab2496dfabd185f34a4fd31c8776765c82825551e5975e0e15350e227e587169a82b2d6c3c695e6abdb61841f229bf8d898beeefea9d1b5cd573246d20991f4b0318a93ed5eb4f218f941eaec8eb4c0000325b14884d633372c8058294c792aaa47d6a9d0ce584ab2212074d22062894fa6a7af0919e65a5f"}, {0x100, 0x105, 0x40000000, "299ca46d8584f33d51affb343e0f96c0b72de4c7cd521c22a82cf4aff42116269c65cafdb971dfc755f101fed96550c7ceda081c1cecaa397cf5fd4f6829e3ea3ae579387a1f5349b9705b7540047850425c7152a7cd695cd717dd53126661bb0cd997ca226820ab93beaf4557e2f3f0c7fb56aebef5fad7b0768792cacdc0445383ce3ddd1371b8956a75022c0051a6f71a71dd8bfed3c5f6d88d899c7f91d4237660488922ae96ceebdf776fd9a2e928251166fe73795b75443cbdbd5db3e35799aeca65a251de87db1579e6fd67e0c4320ed5baf1c27e07190560562bfad5aa586a9c65090b8fd125"}], 0x688}}, {{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000000dc0)="f52128388b723a60f0ed2ab55a30f5d1c30a514bbbdaf91386f5dcf415d68b9fcad6f7ba9931f358501550a91016f8a61330a7fff2d3cfb799b56ecf1a718494325b68a108ccabc549165a527d73861f5ede48755d9fa2519d7c1cd15593b2395699cf6f695412cae5577b8dd97e125d78765207b85ef12af64002b825b3d37575f97d5eea9fb249fdd8a63c3f2275e2835756cd5e84ecca1252e927c29e6dde82d25d19747c69cc98c1c44d47408d4441f38cb17b5abc615c5c7daad11e0874840a95800ca236b3b0547589c600ddd85fe8487f30b25802db7a049384d6a09cf97f2ba065e4eda0c93925", 0xeb}, {&(0x7f0000000ec0)="15c714692f3f9e325928472f3e5b7fb0a0dbb6fea94dc44a91212a54d88d5d9b294396d182ad58ad0e333988ab19b40302ab9f1a3d971ec56ceec3b87f6fe1748a7db8c418e2a727e5b359543b01f194ec2bdd40b1ff283f4cfa61e08b18a0e8cace47547cdd74292e3515efbd095b965ae07f43b81e4b675f9fd8262512ffef7ddbd6fb0655f45d926479e08bba9d6f3eca8a5c3d1f5ad5819957ebeff7d93bd96fda3f", 0xa4}, {&(0x7f0000000f80)="ca66073afed67fa190e943bc8b7473ba08be69bf10a15151a588a8c4fb0bd839c8c5223cf3370452c091cfa1b345347fe5b793793ab0901133d9144e1bd4b8e82d4ec9725f99cd6cbaf1a4d3b69606752a890979630ccf60441bf420c8bd08b3d79d830b3e3c5183c54a0de18646bb3e72f85001d4b9dada1085c3511647337073e0600d09cb4767ff845268a8388121d10883777546697767e759454ee4a2396fa3f3cad931666c49544eb0c69ad2d46aa6edcd5eb5922cec69978448dd160933ce1e1f187a60abfdd4c0ef6f8c07", 0xcf}, {&(0x7f0000001080)="1e2340a4183951681dead08e73f9457ae595b51b3ae88b8f48b2cdb6a087e7b5e27ac9899cd0961652fb315b30f2298c1a4fc6ba09695ecf0ccb42e1ff037b8faf1e945154f227af47220401d1135c5a5ce5dce1f7e503dfdf41936b742c4c92ab79b8811083641d0945f3bbfe927010add47bf2d543e4a84e0dcb7abf579a764ba2189bd8efe19c74", 0x89}, {&(0x7f0000001140)="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", 0x1000}], 0x5, &(0x7f00000021c0)=[{0x110, 0x10e, 0x1, "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"}, {0x70, 0x3a, 0x1, "5b1bb5d7ee50ed790de338c3f0d84d83fb9e86735a02459f5bc3bc840eb4eb292ea77e8a2b804864e8955196d64d0db6278157994b1b3aba4c21a8f0a06cf056f29486fd186c5782ceb05d6ba6b1198c0ed01f27135ea0e29c70185467708e"}, {0x1010, 0x103, 0x7, "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"}], 0x1190}}, {{&(0x7f0000003380)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @broadcast}, 0x3, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000004940)=[{&(0x7f0000003400)="d5388af38d4852fe06dd1b560b162196c5630d89f9c3a5940f65a0a1c548de016b1d7ebc6d63bddcf210c0f76f12aa0e9ecaadb46bc664f2d2c0c85a7f4eb8b450bf9567b11458dfd570dfca2e23be6752a178358f993dd058685cada3aca7cdd8d29fbe4bca9930979c9200ea05bbb9", 0x70}, {&(0x7f0000003480)="68994f30cf07170a74f00da147fb706f258eb565f7e4cfec4f7c2602c990897474944bd5d9982c681cb42b828cad890d796d30dbeffa20701860c8e38ef8125e587785711f2ced1c8f1a6b0942ddbe838434f04dd9eedfc0db47ca100e03cf09569d11c83d642eecbde8eed578b3464f50b2", 0x72}, {&(0x7f0000003500)="6c5e4d5414a4586ef5d2298535a07558ab6d89d71a063f6d49f8e958070c6c3d8692020d54883cbf62065f078535182fab8e5406c10556a95eeab0f4691f0585a121a623ea572029464a166b79aab5cab84835b7176d136d931231b150075640603d62e1401f27339202636c625ad77a7ec6fca0f447ef1889f3fe35a2e0fb290f9250b5c8d6c9398a2e2fe92340400aea3e03158849444d1836c1c636069db8cecbef1ae1fa831ae70bee527e80569b8215f9397539fb04ffbddf88b7f21c4ffd445d18359a43c37c6aa2b435103998ff328cd6637465111812c1524a8464fb8c3abe1ead455d6f6aafeed339c37231e016ae227d", 0xf5}, {&(0x7f0000003600)="d10e29a9da623cd745fe37f6b15239123c5839a2493267767660245c856ae7", 0x1f}, {&(0x7f0000003640)="e25697ee0ca112a683aaba97785db05f856236bc8e82b2d90b3c05990b5cf1b3e308f5a8315c294329bffb2ba34a9207fe5e06900cf5418eda262f6f9bdc4c6e96c9e0c2251d90056c48377d88e9df99d9d9b7aaf8427cc8e4f3a0718ffd6c1df6f0b4b559dd589a1c07b715deb57b967cf7f847740b8eaf3416fea7d7355608eb9d4ce01c321aab3673273258e317c5ea2d8c9af9707896256f699aafd3da7c73a066d6602c0c61df275d33a14da577f26e21f4c374b85af201c4dc671b951c28ee7ece41d035913276dc1f2eb1ca8b7b5ba27a546c1397aeae2c4e8d59dfd9d57d889eba", 0xe5}, {&(0x7f0000003740)="652b497f9b3ba84683bdf4af3cd504ad1beb2133dfe69c49d1a7d224216196e779842469f8e035513d5adc080e388e2f359d16c4d9561b34e4b95383957c6272b5520616a70e2cfb0a8119bee5968b160011add1a45790e157b0db8d8678548ee3eecb87de90af75f4cb6a551ad18b1adc874f77ebd2e1c9f1e0e623e77ed57ed6397bdd31f203cb257b26cde4046baca0de0d0dbf3ca02c8be617fecd162c35d31e6d1fd01e7f6c74644701aad47b50624de03ba0ebf549773b34e2db59addb78668e91ce42d53de9d6fa3e51", 0xcd}, {&(0x7f0000003840)="02d46f4d4c2a40a3ac", 0x9}, {&(0x7f0000003880)="1dd2070910bbd78e15f14ac5054c2ebfd82c0f39a7bac0216c46e78c51b2623f33233702b290a9af697465ce2b53fdde3a3d6dfa06da6544849bf987ce3ab011ff391a61c5508665f75c513ffe07b80bbd219423bdddf88a7a11f2f7a388df40039a724c4de3e37333430609071e7cc6b5769311953325b135791d55a5e4e455962a95c20db164e6e4e0b0ca84a0e34204fdd979ea6859b3abd17691cc8bba77f62d770ec5971ec8d49c32662c289d74a69a58e0bbdcd3863a22a6e7d31b2358290e47946b9c09b15751449e8b917623f40ea5065b028e08fb1d8d153654266d1f3bdae7999acb69248084cf222ee52c25572292ce19d71e8e3a5fcb2e9d8c541ba9780f11b9ea4d02c7c1bd9ba5ddc428ac823b1f0e63afc36cfa3562512c4af1f3d745acceed1804840cd2b9dd4c5bb0acba5d711c2a588243f1d86e922a5d0a479f4d22640e06922912ecf6ef2f7386b7940d638a2ced818c787a2d7dd6f9dcf2b3c79999fc273b459c6e53450333ac163221fb7a3270cc131ddb868fbd371eb643f93ddfb3c1ecdec0a1139a94202a9ad8b0ae2ee543cd802a817156c504a39be452fd0fd15293e023b4eba893c8af855dadacdb5bf81fefd0162080ac33f1080c0d33c2f27a95661db068edda09eeb42548a6196dad08e8339b4e661ffd9c499d88f5278a6d99aa9381e1a1a9413eaa55b76ee811b63b064a76b00952cdabfad6f8cc49f6081092068547546a7059875618ed1ec7a98aa2f34ca4b2a4aada55e1565a8d2d33ce42d96e99a952d71e6c4339928d098e03facd830eeec028b45e8832c300adf89a5880dbaf69d07c3bfd50a12191b15a31d3cdbf81460c4d468dc1a4c83a1842dfcb517dc65c3caf25eb2b5a8159ba686d23d1ed20b5853756e319e4b1a52a9be531e1492f836ef7748bb14ad3a223375de5668edbc3ab935a45fc9d013494dc9f1ebf28892a62822638bea22ff6994c6385d8c63dcae9976222d2ab918f4f8e3c26f8d7349d4661a9851aa240597328f4b3bbc2954c427033837733fa0a00528eb8b2b73c31a823fa76c288f04eda363f103b5f0c9b18a06fb5b91a4e8db1e6526d6d769e4d7df96703db92d59fd0302ab67adaa06bac947fa01cc2b4f7cf1ffbce407fde1bd698b97f5b3d59e89528515b580fc3c0167212f954ddd45ef62e0f88c9f0b2f41be580d6f0564b9a1e3c33fa24ae783bbdec26b40c615b0bdfb422f39168645f0a35f9c9c8e0b22beadcaed901b3cef3a62ea2fc31d8286f71bfec79f68bcb6d1035e310418b00dcfdacdfd70a4fdc59e0793f13d8d3afe2a9b66170d25d7e0b37314bee525f282e2215691798eda55f233f75d9ff573b2c1dd59100f32b0b40fe95ae9443ce25c3ff1ba15a017f67f1d46417ed7e5781f31b5f07b454ce5c296d6d0a0b342662e04dcdd2b83a240e02364cbedfc8bf97c2a16d1762c42708a063c825cc6365f6a986d1d522838df64a816f0274110e54c81a66964867e3c77a749b49a5e9c2dc22a5d8072e6a8fe5fd1872e156075164e4562fd3e4dd39b16c02541d67b0c3c6e514323459ff7af905c1c6e057cfbca042a32fcf39806c03e3ac16747ccdf98022b56a561640351b0909e48adb1f226ee05fb81e87489a5d21cac59be636c36532fe75b9bafd047a8b95c5936c43048baed598055fb2bab9acd61c7690b4fa65613ddb8a2e2f53a38b587dbe0c921b9a417002e0ba955e49e20e492aa03481b1f6948bf863ee14e190775579c879f5734f5fe54d83a33102d6e948f0c93752faa52a78456d432f9208bcc7b207a9355af6bdedeb92e1c44f71845d847c81f8b6310e04f3ef2801f2f138c6ebf877f4f44538c3f7cefab82a3dab2af41c165168c7f00e19520bfc2f09eba81fc0d8e3ccdc743391bae5a7c18e2012e8a4def8a03f1a953f0f43ead5ca0c720ad682fe5177cb679fa1cf9dc877fe29cabbe9a55b7172cee5491320d7b0782cb7903f82f15042b03897951e50f1a1c264e618780b0409b01477970b5b7393dcbef0c30a225c600dfe83aab0f89571169c84c28f9faaeb08932a0e2af57699fcd083f2100545155fce1b9794b2adc0514687ed4546841d1fdce16e6351f010b1465b795df023b68104eeeeb981f2c65b66ba537ad271fc3ebc58d37f8be34f285cc99ce634a45b8be817cbc13ac93908b50566d2637d0b26048480872372b0f93783d4bd24d306a004e71b3442f086e65b2fc69db7f461da1df94d62a9ffa2c317727497458327f8c36d2168259c77f6b353e63ac31aa947ebccdff3a9f8dadef1b16375bb41ac31f804364c8b3993323e6e3b78a7d849a18a232ec6e849e6019ddbca3e6d75d709164c2dda9b4c4bc1d1a0521ba4962949dea3267b1b686483186c387d5c6133dc94f1b149785ec8b1446fb389f0368e9566fdfea3b6ba5c516d6c4163d142d9ba411396120ea28d0d789e7c7233bbaf6b760e51b29dbc924b2d66a95b25a63d3ca7247ccb851cb6ac977c1fde90ee986f3b02f3684516b75ac7aabedf28a70a029d6e128c2c6100c6b811c30247717fe5ba176b6e4c9347f81447200013d47febe199e3c96932bcdb9a6b0485b4b95ffe03f2fbfdc5b94600aed5243aed16d9ae5dc12a50389248938c4fc46f3c70fb6d66079db370e2642afd5d894130800795dacc902e642e555f5a73aa1aa6ca46a0202006293dc3ff7e2bb66330bde09b407084db59049474db1db42d32055e84f05b21495ce487f46a81a9841ff719c9ba04c34ae7093b7b4c27f665d8bd76f772ebd8dc861385d0d387c76d0501bb9d2e36359bc61ab5e4260d57119cd44410bf0455346dc286ce449db8206ec2756be8020c2ca1a43f7ef63146dfb45f2e5751b33f30d83f19f8759c5b87413bf0fb96f3e6b3ecfeb62d54de8a395e8a13af9d2cac990802c65dd149aa21c9475dd14e0151ab1e1b0ce48e7f018d678531f45bcd50fd35ba7ae3023713c8f5a86a3b63edf1ac7cef8b15acba024ff7abe95495073041b53487bba45c2936f91398fce38431c8d87da9ea192f632fedbf3ba70c1a5a53b4a114278ce22e30cfeeac6a4a873c544819c4aa5badf1541b241ebab839bee68559a7588c4d924c72b52d56485e7d896ff95c7da8be68e4483aa161b587e3b7f4e0e3196dfe8b6c201a69a7ef77222467c0a6b70f42c33f15dd4a5d285165fc831001b68201d7957e12ab4d270c3130d0ba0e479fe5f0d3c404ecbf498b2987480a08c2976269c43b16920bec436488a83608ca3de44fe57778c9866194f18a69a75a089bc01fed0ba064cef1b0c2bfa7ab90d4d66fc61d5484f6c8485d520449daad5712f4285cb20dc26d9b80491c825170267b7f56f258e441da7766e05af193a7e5dd5679e2789eb6ebf2031abc6d16354e74b51f2b7e6b927eb6faf09f156bc5a2ff61506443c23f2788a6fd24bde65df0c2f8e7b4e4894dab6d3d8239190260c45830d22c4131fecd177a630e1e18a13ae4db120189e2b09abc4ffb31fa525d867a0548aa15c941373b8217111c22354374e0a8a513ea600ac80f7d4b622ac025e3c5a5f4fdf5788bcdac2dbf001784dcd4362e099bdc979ca949568e1557ae78c9496910cbddcda6c30dd61090838555ea8ec74281b20d05f7c41feb9c2d06db52045155e63316f7bc972fb7a41e8b8115f2d1bcc24fb124d247e530812e79d4728e8f34e0c9f0dfcb548af3a88859a48958d4ddbbe1651421dbb0215b9b49e5c2d706982d49e0d8cd5d19cd59a8c0fbc46790d76c8c4d53189f9d23bf347306971ed7e972db3ce17f08a60ebb2250532100eeb7ea74b69bf4d8a332de37ca6027d5c1dd5d4ec4b1995fe9ff29a5170c7f5b7fc9d82a8693d548bb1843a6d346960e110b1421de931fed18d4aea43d77b6dd35366950704d5196d5ccb33149c226a3117894c055ab910564c56526d41bd3d51ac0191caf31c48b93b218a86f102a6682a1bec833dffa26d2c58871d45737322db14a6d3e832da6c5caf1749df35376fbe75deb5afc7c19e986ab43e5151d1643663231903e492194b2c7a6d40d82ec8850cf6d9dd8300477b5ea8f7619ba62625438cc89396bf4dbd2feb14bf106f31c0ff44eed515786635957646686c912bc7e11f7cf426cbee78374b3b05bbbe3559b78d05a3e04da5e44ce50084a765d3b2b6e69a3843ed20df0e9697a62484a5da1c5ace2521b3ef426834e5d46e07ec719c19e293b177abadb92d08bf463f93df8678e167997ef05292f78f447fcb63a8f77a7a0958e108d2d3f74463cd8064278f8a978f8f44eba93b211210cba0d58f501e16cc3e8143e7ec7c5eb2d4ba6015bf217eac7ab289ab2cbbae254eb3d680b836e63ef2ff657cd17e6f84e5d80dd427a8ba47a0545b8e1ec26b712d4fc1b0ed2bdf5230cfa654bb16b68c8dbc30a415cabbc5deb77e195c94c82a844b1f5232d660a462186928c0c9908406223722d3206734c4741056c568406367fce369dc20154e4167771ff865d3fb88a1b67a3b127ee8cd99b768ca10034c54e8da017eb2af42d85e90ae07348247ad806921cf55e496fd9c8c6b678430d03bb1c2819822ac1042dcc5f50c2cd34201de716f563a176f6993147138353cb4f5cf4d1aa84b5e12e193412c55da37f8c66d3a0ac6ab388209e351e484f90c7683dc6bd2cecaf446cd1978198ca7d7248e17bebb544c5920523d2136724ded26a88cb6fd98679abbf106741dd599e007862fd497c2d620283dd47ca0671545dae2c92b64793ead9f610db116b1236e8ddb5e574afcf2769862871bfca7285873b9df583235e0cdd80e97f2af93d395cad0fc652b4ec6046046df44c1afee1f1407390d5bc9b7189a1f30d0cf6e0f37759ac7bb593891cfed1fe00fd1d426b725dcece829ad4416638ae6e4e3e32750db7b1d6dd6f8588022531fd9ef570e961dedd3b5acbe87e97b463b49ac467c43414f7d72c1c68707c198a9125b7b42853fe32d96527ec33e3e3b581b4bcc733af8733b18f497bdef4e6097879e11566edf5eaa2ff0e160e38c6f2ab2508b2c9f210b29a6883d9cf0160abc6be04e728c352c6a995ad536d01aa7fddada638afd33663c6c3d7689df243af159070564ee6fc2f9c8dc024cdf791936a750a7ab79036b46f0aaff00ce3cd45ca6ec47c3342a2eb0edb75913beb519b67f087905db3d3e19f50753b48d389a98331f5b31f8d48ea77d2d6234f4f76fbc5c16301f62f4ec050d34f4840eb8ee6abeef81d98054b55c88988517e3f0bcb634bae89ab344e21d810de46909f51af8f03188ab51e5169a7fa0ad68fcf24acc48aab8f782ac4024f698cd15bcbdff66920f0486dfab4e22d75ee1ebc559290fc91ab14f4e1de199a7c164fdbbfbd7f2b0d56bcfcf8fd14d3c97b74700c7acf1458ed293ae0c6fb7cbef56c5f7d118fb9619e4bc0cdae2ddab3ebad9bd32f2c0a1680d11b49e03add9ff94eca649adcc7f130fa03fe2f2a3570488d49cb0c77c2daed14d6da4cd0cf49f874aced96c6b2b3c49a4220cdfd729cf75e3479b565c6633941ef7c241ed7c3203a23400e24aecf146662c73c9e5178d7eee608e3f0ea618b93b498f04633f4ff3825d32dbec6cb33b85ea55ce07797673a2236fc6af817012f0576bb31c97759b0ba04687d8b2ebe3410e7d243a4fc6eeb231188d1d9884151e7622e18bb5be66b1d943d19f9df888c80b99d55d70c04fd5bfcbeec026001e4c0c6a62f98c0fe0b1d8e53938e1ad3178752afad9c345158b5136e2ccd6a40cbc9b3aad4", 0xffffffffffffff46}, {&(0x7f0000004880)="0476953d786e0ac8d68b19bd015647a6730414e1c62a7dc86280d4c4865af71b5b29b45dc051c1cba925197bbaa0058b2c32ad191b9083b863a98b31e1ba7fec278230d584f1a3f05301ccc5eecf", 0x4e}, {&(0x7f0000004900)="ad73e041ebba", 0x6}], 0xa, &(0x7f0000004a00)}}, {{0x0, 0x0, &(0x7f0000005ac0)=[{&(0x7f0000004a40)="c65f94247b23cb4b61054142ceb384168e3bcec0ebd15507c339982b026229e174e129b7f9805bb7d97ab1c88dd3f418cd30b6669833d046eb49945acbeb2687731eef7bc7d8bd943471a862c90c3e08949b0ca0cf6d12be1be7e4c971941937b6bfadba0b02ce3c61df304da6eb927e36ba938f02", 0x75}, {&(0x7f0000004ac0)="7fbbce7aed28275544e9eae36adbfa7d9aea0c1c6eb920127d4b2959b7de3da37f4cd57388bd7b7ae1f707c2fd2fe6f5f5ea1b1c52cefd1aded49b42010219994101501b0d6be219023fe30a4be71bc6365d35b7f1fb4915d8b0bc445a51fdd6bf8a04331637b65466ecf02c4529e63fb45ca79f05aa35f35c33fcffe9dddecd2a34c8c841adc449c084be0399a38a06265b3b80ad1b50a310998fc02e92a39d66aae57c1f6dacd3e0f2d6aa88dd024f0ac269c36073abb72a40eda179d46e6f8eb4c68197d7cb68c5bbc77c184cf86b890b1791cc67e284bcecd455422a11ff83b096c7398c2c792cd5a9304e9e827821e223831bea6b071ebea39ea56d8e62f0f9d076819aeacba409e85155ce0e153e2418aff1859061777be554db81dc2a8310a63de6e613d1cc82b3a6e5e69c71b4661e1917852b669ef380d89c857138dc581934d8aeb568377211b43be18ba51afa9ea5f31a6fe074fefdd00cabe8ff87fc04654fb2fa543366044fd27425155e123ab1cf4b880f0a7a5a1cfaaf6ab20968077b9248f93a69f271746df3a5b55944f2ca1e8953384dd466852d176ced86fb1fc2dba537abcdc4f74f12f05e4dc28026a01c24f8d9058d0bf23b0b9666f996f34b7ddf5fd2395a1572931dc4c2715a79b5507537d215389b0868d3b286f9dcde7ff6c2dda9e4501050780d767304c5f3647abda3bab5fa959502a4a546b2ba0e26e544cbe0e947769c1f002567dca1c25d4a75b3b8fc5a7080852615fa5ed37ee49b180d038067f6ac2c9816109c2c72704925efa76dd9228214f7a4b859982f8fad31bde2254cae8cdb6bc2d2170da6bf1f6a2deb23cb02138f98c10b61e9748cce1a6fb4ca5ee167ab072882ea9319731f70c477a05cc0bc2e0f18a4613386c36f4bc66a07123d574ce0a5609d2584594a8f62d70e05357377868de7b6a95f003501a3567731deb16c48dea24abcb211be24ba0f5c8a0951a110c61ed7c7b43cd7d3795fc5f5ba511c224b4bc2a035f9f5b3d3bc06355aff4f71eaeff73922bb6215bff756d43b35acf3d9d9e2345d8b9b4766ee4373113fe21cabdc1eea4112d1279083ad8ca41d7304f4b0081b7d6f9a91fcf620d6e9ef708d70b31ca3225a3416dd7873c3d788cd7d919e0575654b4c7d9cc9f054bc39d73e979ac132f3abfc769e1c7c160971209670c69b7d1b4a791939dba1c8ea53f969cdb2cce783275a0a35d1f50b1d58e29eaeff2f799866115e7be62fafb2bde98831ac9390d1ff5a324191f95302a5a2cb81cc0b7f4d9d489ab1645e87ead9ddbd1882b8b65a5d08fff79a4a1fb97054022ba7e2554e521ba5e217547401eb5c5548659f4f2101c4b879ee7661d9dbc6c62624301178848760e283da2011b40186d455b3ca1cc841efed3dae77aac8f3f5274433ea034145b64d0cccbd59694c18e060d401f73830d2f334b33ac3242f41696d5d448a5d37ca009511b97edf29096aed46fc66fa4ff963355136487c0c3550e10e965873cf6be8f2b10fcb405b7f048a7ae3f45c0e2927811901a435474db19c5fb4966e68a031541612ac0c15c6dc2280a9a3018f44f92223176509541ed1aa548e45ce9d0dc2322c658ca27ef7980cd3ae5d337e1e62fc4d265cdf560098cdd805001b2449d9ae6a1cd6179d4783da643a0ffacf057dd7b10c13c645a08f308f5f7679c735eb1b654c334909150d8c9056e11c6d8a59ac7636dcadf285d833f9b8c240728930194a361d08ebde6b8858b6d4e8cf4dcbea9617785d94a6e6727b38236757a4c7fb42e3ea214e80dcdeed93ea3943e80cc53eab6ec6b22bba2b1c8713b55cebe24fbebc8c6535f65f413512816231b02ac68bcb0a9a0275542d8e7cf55cae22b6696bab3597eef724471a3152bb888e633fc7ed4478333559e6bfd76f8fa374186af52b408752f22acf86a1c76895f924dee0bb3020110976e53efd193d928b3a1af90c06d697c4d1ed4e76e879e47b8536f504ee592010959e8138f9a9b11be752500a5f341dee9a5a00cbb1fd91c36655c5748df7ad0e0d1e578085881408e01ea09b600d3012525c181387d084fd06e12683a515e8b7153d0629bdf37be971885b29f3c53524316bc3cab71c72b41a2a6d4ddcbfd46caa7607a5541d8381b2297181f1561bad289f29d5952b674f3f111bfc543f247a27be333ce605de250061394096cb1cfb90597a3d89d76dd6da58b09898522b5c1a9053ae9609c3143404e69d800c21d6cb07f7ab44374c9b5f64e11573288d153b58311e729772d69b30fc2056919014952ee8b610a06296a8cba4b95070c8bc60881411fffe33958f35975f9b5a297cf7bde1a5f86837f6c08b504188130be7a5e084a6eab8e5cc6d3745c1444ad9249b1082769408d3d89d0153f53fa782cf8afa0f9739199dc3177d687281a3bd8a318dc8fb8114cd0d2b033505a4b42b01bda6ea5de124de472f3247b325240c81c4e8eb635c3b11dde5bfafb8094ac5cef10a71c3e5dc664b62854644647a0657470fb016a0242200586335854736f6aaddb8fea04f5d60536aa55e4e455d553206b7151559539037d1779716ed8951f52e89113d7dfb619eef248fcea0833197e47346279666578efeca1c5ffb15b20749463f1b129bdc1397a147cc37c2a869f329eb1c57b5807e9bd9db6be709bc4a3fb2b5fc6c6c8c45e66788311e856627fd959a967330af5d5c1a01a2f99dcf7ea98539d602a78bed602c3786d9760b302fc011d6627347490c35248a39787f320b5be7f206377dec42922d947c9199ac9f109bd6ffcf13c1a1f738989292ac346f708be13914a00727240f3cdb3b79fdef0b1dd3d7c69f637d2536350c4634a21f4521e50d0e57f93036c90fec26386029f1d622c1779fcca128fad43b128813769f90369fb52d031ef8ff969277494807f6cc8570d35a6734912803632e156a6f0de1d208d43c01c02da08bdb23ad8261f154c959f0af7bc95d716b8d74f0db0dec199b4519e70ab76f4b0eb516c2dba6731bd5477aeb1b24b29e9c0b5c3cd0282765d12235da80e0d519723604044da4b9f03ed3da42669d97ff20844ae181b7504331a03744e36243b882ae1b749a85a1317d0e4e42ea524141abaf668c468861de846dd44ae37a08567a1bc98c1561f312f79369ce26b7e74c7d04454df935b3219bd53364a2f73957d4f2bc0ea4f15115844a710a60937866984fe6231fdd73b2088cbd930d9ac3e67b80e66ad0b2a2bcb5ede1e7f4fb832b08b66ef6c25a38880f3c5e3ab74a099b7b77f89dbaa13e9a124a6cc3580754fea34bbe7907eff153aeaa4e1b8a9a7c444e2770afd9535b713e0e1ab221c170e5aad5a1f19f8dd2b539a5c03c120110a1d6e693cc38ebbe03babf6719406eedf59344acc1a094a5136b32a8cd55c18300e3f9608e43883d3cbe24b26dacf878eb07fc87f932d7b5f66e3a3578328b2c65a0a4b5e1c6f4fe78d997f7c542ae7fa2b3976122bee1c5bc4319ea62da8c9a0d796d58d07f70737d3539ee53e5bd55743d84d814cbc816ef7e641faeb48d3f186a036a6d4a8fcf4a95cb8491c1bdf9dc5172c23ab72a2a28182bd55f6a8ccafe400e5a1752dfef4a157bd3079f42be4d1ff40019762b9a94c3ed6acd29872817a89a501b95d3f50f88df4f20dbaf82a22d0d242c0d2a2d20d426ea74ea7d1791d9dfc4bc68120dc52b7449b299afd1b250945c12ce1f74407f4c6514e2578a7fd2d00d021a9163f576b0458ddd3bfbe4dce96ea742d77bf4a26fed6b38396d84880a8ef5c896602a833f8d0f02e6e98664120fcbfe506910459261b42ed99803c72aaa0a5a242b7f505eeab1428ffd98f2149590eeb20e9abdf37f027db2f98d58c95a3dc931fc9a03be0406878c2a3619d5a928f8a7d5459f6b146f34bbd7c8aa418826b885b855c358a7864c4c8c609cb4e5eb259bd201eacc1067f304757b8a6ce75dc0595ba836676ec0b1acce75ada79aa19fb3bd73b7e9c5b781a8983969e880167a693e92272cbc918511d3a61cede74a5048f490e4bb44f21815065794ea1bc81d5e40b26b46314b0763e4afe0c002e39adcc51552e807574d5c964c3237ff2dc570dc2a2e60335a0f6683933640c7cf5c531a7331d5eafcd7e7d6765bd586294981728d3f0f3245728d3711cf468395e4baea0ed5d25a18a97e2a37aed4c1e91f59c1a71e5f4582759ebf43d9691c49972cd96425119afcb25231d47e86e1cd7cadb5c85a250dbf706ba88cd1048bfad16e4468cdac8b5ac70a8d0e307a64edb036e4936952d9c167aca6dec5323bbbfd6d7b2690f8d1d91278b12d055195abe02313ac99e292531573a72913eb8ea53e86159fc121c9494d4bb948e305771a111230f3ada53dab74d71cd6be41fd4cde9058bcf647db711ec5293daa865a32d920928a5c684d05b012f157c95724d3f2488659de40a59cd8d26224be3bd754c38926da9125efa6990ca9b540335075595f059f18992e5de1387e2b2d865c5ca35262a35281f6c6ab5a8a03838002945376a246b42a831dc3891e10f09403eca8f27f15831e85f3c87b317bcc0be79008939a40f4847427da001e9113e66b37dbfb2250156a9f7837ad370dbded2e24a4f8a25838479046f9ddef309760f953913199c8a75abb8e41b191f1203f45623d1a462a26ca07079a00af6e096f3c95df29edcc847aa913690f11a4429ae2845eeebed19f18e40f060f00fff36d2858d63b21195dc62750d67882d31d8d2e70c2e757d05fc11471664b9fc6184668b5d196e61c159dce27bdab25c6f28f717fceab227d576dd04009268e7cc3b0b4e52c4df0bcc04c015748a7480fcc59dd760880fcdec457dd704f3246129ec149cade97f12cccd42ab46eb5de9a1815d0ada597e3475e96740fdbb1b11fee9f4820f294280d8ce6768a81a738ffd1f3779dc96d08d1fd8a75d24f5ec763b2cb38ad01e4bec9a127df838e5e9454d2dbb6c78bf56e5326ff6776600e2493e3441677a61786e1676b8d02d330efbf771bf5de0d7b406e9b0172650d6ce83fc6e22864bcffc2658a6b4d7da6594389d825b9d4c2b98e12dd1e775c669ae38f2b23675f3214b718f6add8547bae9cd1047e68fac61ba3eec5e820ef5b6387b24d827adfa6a77ac12338837c1d0d2965f9530166234dbc7614e677e09f6fd82a17883b52a3e258bb5fe9c1e6b3b04fa1685256f26b42ecb1de89964ea301ef2b154374ee893974a984020251476b0904549b0e275a3754e874a745497998f288207248a9ce38223fafab9b2421cd087b7612723b6879ed064e32824f5de3ccf63aa8483a26ef4899f7ed310fdef81408960340910c0684d663d085c0bb0d89c1da2e37591aed98c1d51dc612d1ea12a813e5d86aee485d3b0ceb89518bf241df537a079ed08d91c38d20f43ae03ee7b44bae7231f85740b6eafe93287dc4ea576f435d94cfe40aa37d7c97af099da8a17d59470c57d46cf06086f3d2326adf3432fdd1f92c60e34a48817761a0ec55a7f192e5b8f9edd1a18c2a401d7ccd7c33d435e9e18f101a40f0bef9e1efb1131ac4fa0c994061b3f8d443f9c7f6b4b0420f91aa2c2e8c5b497805da6cc725d40db944b436d5e10ad46b9973699ce732224abc50e0bd4154698642ce02f49e5ee51892f21655f0b57aad80eca54aaf49cc2c2af79f895836ad534f89caf6a6f39950181f50bb22ce0cf0d45e8042240bb2cae0cd1f29fe3350ab8e84f3759aa7a1d7abdcdcf1fd35f757492ca2c4830900475b05cbfe1656", 0x1000}], 0x2}}], 0x4, 0x4000) close(r2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r1, &(0x7f0000000140)={@val, @void, @eth={@link_local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4b549f", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}}, 0x4e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socket(0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 02:21:51 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x5e, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000706010358d43a83587cff000100e900050001004d"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, 0xe) recvmmsg(r2, &(0x7f00000000c0)=[{{0x0, 0xffffffffffffff72, 0x0}}], 0x400000000000061, 0x0, 0x0) [ 3055.362935][ T29] audit: type=1804 audit(1595470911.688:4786): pid=18825 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir251561709/syzkaller.UZqFTe/3847/cgroup.controllers" dev="sda1" ino=16377 res=1 [ 3055.458238][T18806] netlink: 'syz-executor.2': attribute type 9 has an invalid length. 02:21:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x300}}}, 0x24}}, 0x0) [ 3055.826335][T18870] netlink: 'syz-executor.2': attribute type 9 has an invalid length. 02:21:52 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a003f000200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) [ 3056.004759][T18788] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 02:21:52 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0028000200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) 02:21:52 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r5, @ANYBLOB="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"], 0x12c}, 0x1, 0x0, 0x0, 0x40}, 0x44) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000180c2000000aaaaaaaaaaaa86dd0000000000000000000000000000fe8000000000000000000000000000aa00"/62, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x4e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socket(0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 02:21:52 executing program 1: syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="13000000", @ANYRESDEC=r0, @ANYBLOB="050000000000000000001200000008000300", @ANYRES32=r1, @ANYBLOB="8bfe649baf5a46059e3be1104a37593bcd07e2b8329683c3c7f37dbdb4d47359365add175045f4c1b5d91228bb3bd7d7ec9beb95b6def82a92f73226d64979a5bafb548e27f9af54eae2636178560d9e412eea65a4464e5a317c7dde93075ca75002a478fe4e951da29d1f342e6a987a44eedd05b8ff598ba4cb0d70d96ce07cb97ca6cfe3a1e87fe73220f71b74eeaea53e6e0a5daf57296cf42147d92bbf68038508e755c941f592"], 0x1c}}, 0x20000) r2 = socket(0x400020000000010, 0x2, 0x0) write(r2, &(0x7f0000000100)="1f00000013000d0000000000fc07ff1b070304000d00000007000108010039", 0x1f) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r4 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x8, 0xffffffffffffffff}, 0x8) write(r4, &(0x7f00000002c0)="1c0000004a005f0014f9f407000909000a0080000002000000000000", 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000340)=0xff, 0x4) socket(0x1000000010, 0x80002, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$sock(r3, &(0x7f0000000240)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x3f, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1c}}, 0x7, 0x4}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000003c0)="23f02e7720cb1971d3f3cf14d39c46663df91c7be8bc40566d4f621e823f4a89621271367e16830286d36b6cf627d257727d2f1417c49eb60bbffdb3a803032b04d889cb71c8ea5cba90bc60a4637fa911d1988e9dc4f1716843218870990476911f6af967", 0x65}, {&(0x7f0000000c80)="9cc4a01c4a8e34b51bdc95fadee075d0bc934327af4ed400ba4283c4ca3815b3c608ccf74abaf8a5d83cec125e7aa49bec2c58ea6eab9bda460ef5de52fcc840321d9167877f587109a7fb939f5fb3cd236d100484a596294fdb64c9390df2c93ae8397737a3181592677f84eaf086aac5f88ffaa42c754640bf9eb6fc634022a64c01488a56354c9aab0f6b03d7f25d2d8f2acca6953fcf535c708b416c09c7e5c2277f6e4f3891bff241cdeacb1b97c27fade9fb9a600c90d4986afca44fb0b84b6b57962a8fa36739e8693044bf835344df44bcfc3c3859d6be99e36eaab96586006a42d198472ea81de5c8399b2527521c75a8b276f972a97bcc873a1b6e322552508029c7f9c406302ee8c2c0327f478292b22a846c0562dc253adc870d8d926c43bac7a282f63f1532acc6b8add14485abbd3746a629625de1b58dc04c69b876815a97d68a295a6e5acf15a2296bf335d2caaeab3ab30ca5d83d0028b2e4d1e2e3cf2e82914ebab2b09da26b5dcf83f1c6989781d418ccc45c3da1accd45e394a39d5c811a61085c9e2064f4f5e26dc8245e99c92ed52b1af1eb7bf3c586dc38df3af3f934ba5228342dd604fa4a243ca78fe6adc931e492c1efedcf71a29bcb256102ea99668e5a227f8f0457f88b76b8d937f8dcd1eda71755171253859bcdc70ad57a9a5f498f584578a6bf8df53aca5b2836bb385d1f3db1e1aa6e18f667f011ef18b4f28f246489c89189be9544d490cab32a0c363dae446bc44706eab478ba8581f7ea3477f4e9d99292cc8b451447bdf3a75a7f0a87fb9722723d8da42a0f3de15878c1f1faa5a6ff29908b40e71b5e0d67a99354d67cf9bd3fed0b108061ff64c616480783b9b3d0e44627f89131a42e3dd4d27e7de9b25632659c7a3b80903c5a1105de22d7e23d99fa9ece024f3837c82957e7ae9be9a4271374d450a4b70bd3d5d1bfb9519e49163296e0bd85d01c490f1f1b6142209f3fe3849b734ba7fc4031b1697cb17697946a31957052d7482b5805455686bfb2aaa3fad3010e0f839388e159aaef48743fe2af67745d49a4cef6cfd5d1c44f3f8c82b574a81a93b9f5ae7a2b0909cc786cedc6e0628b72fba8888bf92008d97849d42aecdaff1f6d1a63f59f6df304ef178ce52f7175f6bddacda8cd5b629492f719ccf688e5df05224f7765d2c096bc4ac55a024ddc85365401f48e7835c115314fe2dcc111e358d16dd9c23c983d2c3d87709ec3aae56c6928f26d425f40c05e76b26bb259d426257ce9042a43a15f2776eb473873c73766bc6ee794b0972fa6527120289925c3602297b1b6c43d120f1b49479eff4ff1bedf7baafcba79502ee71579afeb07626b03c2cfb804ad7d6fc2d54a330acc7c150cf60ea71d5e43dd78ffd433cdd3f1a933b4a365bb7bb595176b1f329bd73d58bfa2d24426e20dfb1b1b8fa167567e5e201f0303a7c94a8ab1be5c048ec85debda403b1bf7d93e1a08b9ec4264750b6237e2ae79b00c3071d54be2c611f8fc3f080b0cf585055874b259ac3946ef901c245d0113d3095320ed539752b01c9b3d806eb516b36b05d4402c4a143cf53929e325581741c74bd4c793b76d8bc40d6408aa8806a75c8532283be958482cdd569ea0e6571bf2d28ceabcc7b2704d7b81a4877100c166139cb51b155675551fb028ad698c3aafc0bf3293583c86a78c6cf4766d2eb0827d001b2cc9a89e63150707e6fe63af8b5d9755e0a7ab541a45363d813fb86b5ae0e30b3d11cac447268d1aeb18e5895af73e7c4602246c049b1b011a633e4f60a2c80aebbcc3e9a6ab132a7e5c23e370f84091fcd8147284a08e7e3c80452346092d0e4d31a7ac8b088f9c43bced918f6da94c9e293e19aca063677c39343963b7d46ba94cf0d6958b842062b6fb3dfa453b241ace0983eabd87ecf92ec6621396d6d562fcb1e56a1249b8ab78bfe32cd7f29b218ed587389ec2b4dd4661f1b9111ffeb46db78cf9df7159a7187b0b9773111758ac5e4f0607aaff6bfb48ebaeeaeb59e144ad91766fcaf90a5a31977db0d9f7b868f2dcaca920a4b6269f4e50e10fa20f54691fdf79fa46b6b2056bddbf0471b9ef748e0acd3ef975285ea36fead449c093017f7b3fc12042ac835acb8256ce52758592fcade2fb017fc87cb80149af9c6f9c492f65beb2b2d1277c626fbd11518abb12da658a8ed47b169c339edf550bacc41cd4f0a3504ef584f3a0b5cb0359803b7428a01485abeada4bd56ce5a821d2f6120a56d4180be2f5afeef9cf408bdbe7c813ee4a27f2a7dddd4bf56156b3bb36600148dea6effcd58fac9e479431678b794355ec8af3c66f982146e0ac8763f34b929ad5a56356f76e212be66ae07a7faf8938e77c669d9e80630b266bc491f24ee0232b08007fcf523fcfd73ff133f5ca2db4f039af210e9d9c52f00541cca5e716d68c46fcce67669924a8a2597cdf2e2c4381a4cebd5a62f00fe83f5a1138a06b606bdfe0cc445175fcd4911172034efafce44992436ee96e673771e4a8ebdab1acd590658eba783d7733dc07d9f543d69c5a3520e182aafa628be9dbf9291e28e16c718d372aa2facaf4c0fcb600de610b2e25900660dfd383c109142345839ab6ba009d9073354313e92caa453efbae2557ef7c4a315552b703bafc4ec48e732718c983168a4dd68b875d2fc82eba008fc71a27351f1b98daad94c5d9131681d2f23046e158fe06ca937fd5c67ca0ecf60251df978f5b25f6978fb7d151143a0d584a3361db98c69e304139ce14dc0b670f2436c6e1e2e815a43a3ba2195fdc766c9bb16e043a748fee12941753dd85d98a698d5dbf2177b9225c101109d80d9d9d29bd4ac9f2d6022740ebb9613fa8165fd6da29b7f33c6156b6d5be047abec4f5eea3c4daec99475eefdad7859883d2518cb705dd0a594d1a423071f8d5bdd0e211e8264c5f69fed444d94f8833eb67dbe19aecda998cce14b453fd357b1e232c70d214612b612a52137e9ab642307db2bc7f660d2c368dc3869b478f6d616dd80ac0a3c793c510c95445b7619ef3feb5ec449ab2beecb6e19209f4e403aba4e0150fac29c0d164de0615014d3cb696589d1a212c2e6bec73b451cbd987f7c10e0d33d4477e54f436226a9e9a640285354bf1103f268e27f5e3fd6f2f1625e90eff200b568e8030a9d6a1c61c5cb4c9005f6221072681553b76758763e6785a7eedc084cbe14c5e2403d78fc09211f51a03c75bcb2cfdfd6decd1de074162d31e6056a97bf6c314a047e9ca88322eaefda410b161763f8a4da0bc7fbe9b6e10194d5a1f6b772f01ef73bf109f25183e75b1cf43883d6f523e2f5611f0f3935746bbaddf3d5096615f2527574c3078026cbfb440fdcf93989c37bc6a7468ef050e174a39de4ba46a69cb5f918b650abba3f8eb424ec1f650f9a44e6ed689805f6f43236e3cac89e076de480ad2460fd9ca701c6f8bfd44926df32a5b84e8f37196f52e8e56704254181ef98fc788ad4eb08a57652a9a3658af33702f2c0d8b1a4eb8617b5e15b2158425ac2b2a30a5ec0436354027ee692dc46fb0b5dc9e2fa6f94740bb1f0df114d5113df22850dc7aac5e8550dff1d7e4eedbd528a3fba06a3f4d65a2f491cb2e3ea7bae6ba13a972f85426388c640c674edbe9032965a89a4aaf1315ecd6062e9ce1b80f5c4474f97aa6ab1a41e330515d0085c8e9adc2b66832fc98355e4096922ae8b751980af32e21e465d279b1ec1735e42cd10af56df110838e2d9717f287760e4102f83a4092c51d27443798bead9a3c57664836edcc8b1f38a1b8bfca94d3f3d6a2c2f15b41092ffe08c97b9d95c9dc7e85f1693b4a9c847d9bec2896a6ec8de09db565a52e155c3cba8dfd05dab36588fd28f58559702e1ef8efaaffadf5ebd1cd200c4106935314394acb93a78d19902ed5d4850113e25e00f8524734d971fdf29334874413696dea8bf965c827dc16791f11ea88e032cdcf34e60e06587a6f8da580d5b5315ea4c982b8c0113b16e9fde0fdb87119607dc70d94b63eefa10660de2ea9faacd01a3c6d2c42a412691cf6d59ff3e63a2b77fb8e425555358f455bfaa3ddb92f8ec7c4335bad836408f0f8b36b285384cb605c958e513401ff6c5effb8f21201c2e4056c21649344f5cddd7009548eece5889e733988316cabdc7c7f87ab9e9bcfa776110afefaebe5e4ca35193816efe96d4e9f2adbc3bd2028aefdf3d6fbfedd824d2e84c4ce625602488dbb73bd784f3b875ef767d03944f0ee07e3987e44b37ce0ee40a4a4fc64c15b4d807b842a028fc1c22b4171f098ecd63daf9ff61d826d5c448bc03a5e35f6e5e505ca7d72a2bfde2cdf1283c2b6a39e266ec275e0455d67058c95417787a77d19bfcf8e17acbcba7b983ce5be664119a2cd01eea659876b303b5825eea57ea4908528f13a68f0282e820153e104916cd24f4c516c8a0b68d37230312a5d3340fb64e22b1fd182598f619a543e4bc303a225637d7abc57c468fddc2d1e0529d2079903a22517aebb0b9abe464b545212516a83fa3906266ccfc59788b735948a3f35efde9b330506b6a89c28e3a2367cd428475afb54bce7ff8c4210a7e9f133a36be5e67e8c0b1964210c3bdca459fb83cd4d39daa093721f1ca5020d91ab3825f4b0249d7d5534a0b9d57798d306844da9c185b4280b583d60c00b4d6e1ddd4079f93c7b9b1e5a84db31acc83ed2ab4b8a33e0d9ae5c4cdb32bac5e94ab4cb94abc733a4ff3d4c11053a8a2c4955c8895ac663e12ce606850f3fcafe4f9516ee28cf14d1055a7fbe786f3297ec9712d817c93c5aa8527b22934b282ff87db17ebdd82c843a59404ee27989ac99ebd8c1d11a1489c39a04115073d56b2748a3005a977cddf78365581e3ccccf24650800b193af7240531ce74d3fd0af674a27b24451be26b102b4ae241acc18fc908f2d1dee1f6c63f83861642b0030d39beae7fd7ccb255cb0517551c043101448f1eb967de7a86392783bc8b45030aa81ca04d75b391e633f07aca84e11adea0d2ac0d0934bf444f3663f9eb4c05c7c9d3b9d85c0b16f2177aa8318237d2c761d1bd11674f71afee84ddf49a99403ca875f66bf48ac301436bb444303f40ada39bbaf2c2a0ce621df2c8cb6a936efeea5a34805dff16571eda832c7803062eb26d2c58e1fec973f619e0a7eb2cd678dd27c18a3953cde1a867f5b35170ddfd396a41f4033b871e1a25fcde423f01153160498916032c0457e169d4e35313cac41eb7001493dd66463b4a0b0442a714ec8f58d29a2ce186369819fe8a021d541d41c77fe96bd48311ad626df55452a4b3d8cf410480ef0eebc889afbb9694cf3d63d104b7af6887d20194f517fde493ae64f8aee38a3fe571e9d13f90e00a583bcd33488d2954044d00ecc4330054742744d5fafaf2e7ff94aaa0edbc6976393f87264e5dfbb062b097636c528cb671ea9c087b6fcf38425174c6eeb8486395cc50a2db3f8224dc48755d7e9451185b5135eb05f51c7893c557fe6612d4109f572f24c0a8b941970ca2a09f2d3ce9e80c8664cbfca9b88b599e67a3c2b7a0c3a381d074b846feb3a6662b216fa0058939f2b50e673d7b8ae2eb364076f503a661ca05f5ff4415ea64c0425dc193480d2c3301440151a4230e4212c0fe3db170960a00d5765fc766bde8c15ea11d01952f252da502a1af8a27169b89f6801de1524fe5d0f24d1d18bf3ced80dd124919497d698a7c858ee0ce278378b1e4e02ae42e7001e9eabe4527406eb52cabe", 0x1000}, {&(0x7f0000000440)="6f188546f84743f87f33e7104802d7d2a26a4ece1c927831ac0e3adcf66afe7de06fe1b10518b67d7ec8f60939dfb00f9456059da556169d5315233cb531bb27cae289ed17858ccb34fd26fbf3fb93e0d32f43ab450c7da2951d9a228abda7310f770cbbfab6901b4d432c70ff44bb9c997cc0b6e4997002782f23d12e45949a9fdc4ff8b48421f5aba5b50a05da914f4f577af25af897dbbb690d3d5e3edf0a64a53f505ab34c4f7ecba6", 0xab}], 0x3, &(0x7f0000000500)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x40}}, @mark={{0x14, 0x1, 0x24, 0x8b7}}], 0x78}, 0x8040005) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) connect$llc(r3, &(0x7f0000000380)={0x1a, 0x1, 0x22, 0x0, 0xfc, 0x38, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000680)={0x0, 0xd8, "ab79ceb019f2a4e305eaa9a23cb275b365f8133129434e9293728dce4c7ade08b4ea2996971a7789016920c2880c1b7c15e555e8edb80a3f3877f0909e37876ca5320d701fbc693077a621e00d56559e79096d3e3e00286f8a7934e4ca855e58422d32afcdcea5a50a65d96076cf3234238bb5fd0425598020f541852d93fa56034e744351f75c03ec767b9e9283f7b76511dac71df725f9d176582edb6082e83b0710bc7f389159d66b9171b9c9852990937200598d8f1f9fc145836b824af6642f77171ca5e074a6887e7de5c1302c3c4ad3bd14faba7e"}, &(0x7f0000000040)=0xe0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000200)={r6, 0xffffff81}, &(0x7f0000000780)=0x8) [ 3056.270364][T18895] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 3056.576681][T18897] netlink: 'syz-executor.4': attribute type 9 has an invalid length. 02:21:52 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8}]}], {0x14}}, 0x7c}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum}) r1 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2321202e2f66576c65308b02d290"], 0x34) write$binfmt_script(r1, &(0x7f00000001c0)={'#! ', './file0', [], 0xa, "39980cfd42119cc4e10503a00200"/25}, 0x24) 02:21:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x402}}}, 0x24}}, 0x0) 02:21:53 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000600)=@gcm_128={{0x304}, "65f1c6d0f0811edd", "4a74cf3a51bf5164b3ad6ab80c9eb38a", "36513f9f", "f32df86100fa3b5c"}, 0x28) unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r2 = accept$inet6(r1, &(0x7f0000000000), &(0x7f0000000080)=0x1c) preadv(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000200)=""/221, 0xdd}, {&(0x7f0000000300)=""/237, 0xed}, {&(0x7f00000000c0)=""/9, 0x9}, {&(0x7f0000000400)=""/19, 0x13}, {&(0x7f0000000440)=""/162, 0xa2}, {&(0x7f0000000500)=""/36, 0x24}], 0x6, 0x7fffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x5, @loopback, 0x1}, @in={0x2, 0x4e22, @local}, @in={0x2, 0x4e21, @empty}], 0x88) r3 = socket(0x15, 0x0, 0x100) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f00000005c0)={0x7fff, 0x1, 0x3, 0x5, 0x5}, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040), &(0x7f0000000100)=0x8) [ 3056.944390][T18948] IPVS: ftp: loaded support on port[0] = 21 [ 3056.976287][T18895] netlink: 'syz-executor.2': attribute type 9 has an invalid length. 02:21:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=[@iv={0x0, 0x117, 0x2, 0x0, "15dc91768c78ba00960b7a5e4e7907526d7c7c8aee968a562b00cb905e1826a8f9ee0ac480576a7134801fc070041984c5c23fa0f93b59075853f70545ce9c61b15ff65cde5078b4209217f0220f0810f739bd470d405272edb16434a11869d08d8fef065de94710ee553b410c3c02a96c156836af8d11c4af4a77e766f9ed8ec43830fe02bb22babf9b41d4e5027b49ba3f720465bf4ee9b63892030f4fea97d94bc6cd1a7d4d6869cb3185e5da3ca0da"}, @op, @assoc, @assoc, @op, @op]}], 0x4924924924924b3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0xe000000, &(0x7f0000000180)=[{&(0x7f0000000000)="2e000000120081aee4520cecff0e00fa078b5bdb4cb904e473730e55cff26d1b0e001d80040000005e510befccd7", 0x2e}], 0x1}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') r6 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x3c, r5, 0x536ae464467e3e0b, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x3c}, 0x1, 0x6000000000000000}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000700)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00022bbd7000fbdbdf25060000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000006000400030000008761fc97cadedda3877426581f32c37b993ff012d4e22295e7e9dcdb16e9b16edbce4a287025b5bc812ee7348b2f25170b1722ce076cac9a597f73b6f48ef90b49659c05e342082687c034e85ea8219dab9230475801be1393c95847f28c58a0da8eab4cc791a006a7d0f1652a70b8a56ee83217169cfa245546724d302a33b60d884d9391ddc6b057c8d27c49"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000000) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f00000001c0)=0xff, 0x4) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x10, &(0x7f0000000300)={r8}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f00000000c0)={r8, 0xd0e}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000000)={r8, 0x7fff, 0x20, 0x12, 0x7fff}, &(0x7f0000000040)=0x18) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000000000390400de00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100736974000c0002800800140000000000"], 0x38}}, 0x0) 02:21:53 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_all\x00', 0x275a, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000280)={0x28, 0x0, 0x0, @my=0x0}, 0x10) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000200), 0x8) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000300)={r1}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={r1, 0xd0e}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100)={r1, 0x6}, 0x8) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000340)={0x0, 0x4, 0x2, 0x6}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r3, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=0x10000, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x6, 0xfffffffe}, 0x0, 0x0, &(0x7f0000000240)={0x1, 0xe, 0xfcc, 0x7}, &(0x7f0000000280)=0x200, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x1}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=r4, 0x4) socket$alg(0x26, 0x5, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x7, r4}, 0x8) [ 3057.139658][T18948] lo speed is unknown, defaulting to 1000 02:21:53 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000300), &(0x7f0000000140)=0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0xd0e}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1f}}}, [0x80, 0xc0, 0x7, 0x8, 0x6, 0xffffffffffff7fff, 0x0, 0x7fffffff, 0x8, 0x2, 0x0, 0x9, 0x8000, 0x9, 0x101]}, &(0x7f0000000380)=0x100) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r1, &(0x7f0000000140)={@val, @void, @eth={@link_local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4b549f", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}}, 0x4e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socket(0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockname(0xffffffffffffffff, &(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f00000000c0)=0x80) ioctl$sock_bt_bnep_BNEPCONNDEL(r5, 0x400442c9, &(0x7f0000000240)={0x2, @multicast}) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) [ 3057.183849][T18973] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 3057.281195][T18974] IPVS: ftp: loaded support on port[0] = 21 02:21:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x500}}}, 0x24}}, 0x0) 02:21:54 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a005a000200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) [ 3057.784326][T19002] __nla_validate_parse: 31 callbacks suppressed [ 3057.784336][T19002] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3057.855647][T18948] lo speed is unknown, defaulting to 1000 [ 3057.855681][T18974] lo speed is unknown, defaulting to 1000 [ 3057.884543][T18954] IPVS: ftp: loaded support on port[0] = 21 [ 3057.887050][T19006] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3057.931927][T19013] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3058.065667][T19004] IPVS: ftp: loaded support on port[0] = 21 02:21:54 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x20000000003, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r1, &(0x7f0000000140)={@val, @void, @eth={@link_local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4b549f", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}}, 0x4e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socket(0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) [ 3058.197170][T19002] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3058.313680][T19013] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:21:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x600}}}, 0x24}}, 0x0) 02:21:54 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="b7f2288a9119aad5265df5cf1cdd8b43", 0x10) accept4(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0x80, 0x180800) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=[@iv={0x0, 0x117, 0x2, 0x0, "15dc91768c78ba00960b7a5e4e7907526d7c7c8aee968a562b00cb905e1826a8f9ee0ac480576a7134801fc070041984c5c23fa0f93b59075853f70545ce9c61b15ff65cde5078b4209217f0220f0810f739bd470d405272edb16434a11869d08d8fef065de94710ee553b410c3c02a96c156836af8d11c4af4a77e766f9ed8ec43830fe02bb22babf9b41d4e5027b49ba3f720465bf4ee9b63892030f4fea97d94bc6cd1a7d4d6869cb3185e5da3ca0da"}, @op, @assoc, @assoc, @op, @op]}], 0x4924924924924b3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x7fff, 0xd6a5, 0xfffffffffffffff9}) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=[@iv={0x0, 0x117, 0x2, 0x0, "15dc91768c78ba00960b7a5e4e7907526d7c7c8aee968a562b00cb905e1826a8f9ee0ac480576a7134801fc070041984c5c23fa0f93b59075853f70545ce9c61b15ff65cde5078b4209217f0220f0810f739bd470d405272edb16434a11869d08d8fef065de94710ee553b410c3c02a96c156836af8d11c4af4a77e766f9ed8ec43830fe02bb22babf9b41d4e5027b49ba3f720465bf4ee9b63892030f4fea97d94bc6cd1a7d4d6869cb3185e5da3ca0da"}, @op, @assoc, @assoc, @op, @op]}], 0x4924924924924b3, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)="782b41ab414aef0a04f0c5cfe174acc336a49b3c9303ccf779d73555f96c4f7e93c4028faedc2552398868ced649f7969870e76924db9dea43abe0e20b04bb870d740c5c705d14858ef9e9b5302cb7eb7b46450d65e2a65e2b5ee0f76bb8ff7a81972ca237744be8f2e51db38888259e7a39b88c1278", 0x76}, {&(0x7f00000000c0)="c703eeadc8408e74024db8f5adfaaeea50f1e8883dae67fdd17c9bcd6dfef9875608ee35c5ec9565ad31", 0x2a}], 0x2, &(0x7f00000005c0)=[@iv={0xc8, 0x117, 0x2, 0xb1, "15dc91768c78ba00960b7a5e4e7907526d7c7c8aee968a562b00cb905e1826a8f9ee0ac480576a7134801fc070041984c5c23fa0f93b59075853f70545ce9c61b15ff65cde5078b4209217f0220f0810f739bd470d405272edb16434a11869d08d8fef065de94710ee553b410c3c02a96c156836af8d11c4af4a77e766f9ed8ec43830fe02bb22babf9b41d4e5027b49ba3f720465bf4ee9b63892030f4fea97d94bc6cd1a7d4d6869cb3185e5da3ca0da"}, @op={0x18}, @assoc={0x18}, @assoc={0x18}, @assoc={0x18, 0x117, 0x4, 0xfff}, @op={0x18}], 0x140, 0x4000}], 0x1, 0x0) r5 = socket(0x10, 0x803, 0x3) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000480)="8be571ccc6deb1796405faffe1ff0fa7", 0x10}], 0x1, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r6, &(0x7f0000003980)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000180)=""/176, 0x7ffff000}], 0x1}}], 0x1, 0x0, 0x0) 02:21:55 executing program 4: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x6, @empty, 0x3f}}, 0x0, 0x0, 0x4a, 0x0, "bb2271d95066002151b9f1e6f369fe7aa27810f10dd05227fbad91696ee5d734f49a31c4c15ef4ad1f9123ac85f86fca55d5a803c46a894cbd960835cba5233fd4271674d3b9c46976c654a20af58578"}, 0xd8) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000580)=[{&(0x7f00000001c0)="3f270ba044", 0x5}, {&(0x7f0000000400)="1c46934d26ab40e02697cb1b9a68c21c150e8a444d058289215545e673da76e7fbafc86c63e3ca5564ad9c43335717521c9c5b7968e1972defcc07d8b70db3454d3b5fab88a6dd4b3be8185f23018d27976dc88ba7ff8b35ea067d064bd6c8b0d80903244db573b4990f4b1c6840fbd55ad63b342d68f90d154ca86d5dfbe2fd7d421468188c39f8deead9690167156dc5de329ebbedc631b24fa37c0306df7d2c73d03e1665545285224a3e624cd11e592d", 0xb2}, {&(0x7f0000000600)="7745f050e3835145a031628a0cfd4603a434bc5c9bd4c7431e23a5de6bd35488090dbc8a137bf2757f3e68079dd0ca6f315a419308ac57141ec0da46ee174372d0692db7f286bd5c8b12ded573d17bcded371499d8d8e8ee6fec3971d10f4ac5e400d4e2d38b9842214a8e9e6dbfd3a55c902afb6135b7077441fc969714ef7ad1212e67cbec8b647bb635ae681d14b6ba07061e16ea26aa6ee9e5735305048dc23b8d1900010000000100000000000000000000000000000000000000000013b433f02fb7", 0xc5}, {&(0x7f0000000240)="fe9b0622f5800a958a785e0255ea88bb1d7dcee13cf70b2c1667f4b8a81c4077c1390e1ff3135921fed41c7273e53b824f7f062ca3fcb543f38f4512664dc53f847faea3b7db4f6cd8b79978de252d67428bb7cb412da09b77576832e2c2", 0x5e}], 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/552], 0x228, 0xc0d0}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0xfffff000, 0x5, 0x2, 0x3, 0x63}, 0x14) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0xfffc, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000300)={r5}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f00000000c0)={r5, 0x8d0e}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=r5, 0x4) [ 3058.811503][T19074] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 02:21:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB='I'], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000000)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x4, r2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r4, &(0x7f0000000100)=ANY=[], 0xfffffe3e) ioctl$TUNGETFILTER(r4, 0x801054db, &(0x7f0000000700)=""/4096) sendmmsg$alg(r3, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=[@iv={0x0, 0x117, 0x2, 0x0, "15dc91768c78ba00960b7a5e4e7907526d7c7c8aee968a562b00cb905e1826a8f9ee0ac480576a7134801fc070041984c5c23fa0f93b59075853f70545ce9c61b15ff65cde5078b4209217f0220f0810f739bd470d405272edb16434a11869d08d8fef065de94710ee553b410c3c02a96c156836af8d11c4af4a77e766f9ed8ec43830fe02bb22babf9b41d4e5027b49ba3f720465bf4ee9b63892030f4fea97d94bc6cd1a7d4d6869cb3185e5da3ca0da"}, @op, @assoc, @assoc, @op, @op]}], 0x4924924924924b3, 0x0) setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000080)={r2, @multicast1, @broadcast}, 0xc) [ 3058.874050][T19079] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3058.895005][T18954] lo speed is unknown, defaulting to 1000 [ 3058.901040][T18974] lo speed is unknown, defaulting to 1000 [ 3058.902270][T19082] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3058.937978][ T266] tipc: TX() has been purged, node left! [ 3059.210053][T19004] lo speed is unknown, defaulting to 1000 [ 3059.214068][T18954] lo speed is unknown, defaulting to 1000 [ 3059.215873][T19074] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 02:21:55 executing program 5: getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0xd0e}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000280)={r0, @in={{0x2, 0x4e24, @broadcast}}, 0xff, 0xff, 0x401, 0x4a, 0x4, 0x1, 0x1}, 0x9c) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="00b8d4000180c2000000aaaaaaaaaaaa86dd604b549fef13060000000000000000000000000000000000fe8000000000000000000000000000aa001400001a2b3a50566c74", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x4e) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x1000000c8) socket(0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) splice(r1, 0x0, r3, 0x0, 0x18100, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=ANY=[@ANYBLOB="000000000000000017010000020000000000000015dc91768c78ba00960b7a5e4e7907526d7c7c8aee968a562b00cb905e1826a8f9ee0ac480576a7134801fc070041984c5c23fa0f93b59075853f70545ce9c61b15ff65cde5078b4209217f0220f0810f739bd470d405272edb16434a11869d08d8fef065de94710ee553b410c3c02a96c156836af8d11c4af4a77e766f9ed8ec43830fe02bb22babf9b41d4e5027b49ba3f720465bf4ee9033892030f4fea97d94bc6cd1a7d4d6869cb3185e5da3ca0da0000000000000000000000170100000300000000000000000000000000000000000000170107000400000000000000000000000000000000000000170100000400000000000000000000000000000000000000170100000300000000000000000000000000000000000000170100000300"/320]}], 0x4924924924924b3, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r6, 0x29, 0x2d, &(0x7f00000001c0)={0x8, {{0xa, 0x4e24, 0x0, @local, 0x9}}}, 0x88) [ 3059.311857][T19082] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3059.546593][T19004] lo speed is unknown, defaulting to 1000 02:21:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x700}}}, 0x24}}, 0x0) 02:21:59 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0002000200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) [ 3063.017619][T19205] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3063.022693][T19206] validate_nla: 5 callbacks suppressed [ 3063.022703][T19206] netlink: 'syz-executor.2': attribute type 9 has an invalid length. 02:21:59 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r1, &(0x7f0000000140)={@val, @void, @eth={@link_local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4b549f", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}}, 0x4e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6_vti0\x00', r6, 0x29, 0x20, 0xfc, 0x5, 0x22, @ipv4={[], [], @multicast2}, @ipv4={[], [], @private=0xa010100}, 0x1, 0x7, 0x0, 0x9}}) socket(0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 02:21:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB='I'], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000000)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x4, r2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r4, &(0x7f0000000100)=ANY=[], 0xfffffe3e) ioctl$TUNGETFILTER(r4, 0x801054db, &(0x7f0000000700)=""/4096) sendmmsg$alg(r3, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=[@iv={0x0, 0x117, 0x2, 0x0, "15dc91768c78ba00960b7a5e4e7907526d7c7c8aee968a562b00cb905e1826a8f9ee0ac480576a7134801fc070041984c5c23fa0f93b59075853f70545ce9c61b15ff65cde5078b4209217f0220f0810f739bd470d405272edb16434a11869d08d8fef065de94710ee553b410c3c02a96c156836af8d11c4af4a77e766f9ed8ec43830fe02bb22babf9b41d4e5027b49ba3f720465bf4ee9b63892030f4fea97d94bc6cd1a7d4d6869cb3185e5da3ca0da"}, @op, @assoc, @assoc, @op, @op]}], 0x4924924924924b3, 0x0) setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000080)={r2, @multicast1, @broadcast}, 0xc) [ 3063.132606][T19207] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. 02:21:59 executing program 3: unshare(0x2000000) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x5, @private0={0xfc, 0x0, [], 0x1}, 0xa0d}]}, &(0x7f0000000180)=0x10) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000300)={r1}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={r1, 0xd0e}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={r1, 0x9}, &(0x7f0000000040)=0x8) r3 = socket(0x10, 0x803, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0xe000000, &(0x7f0000000180)=[{&(0x7f0000000000)="2e000000120081aee4520cecff0e00fa078b5bdb4cb904e473730e55cff26d1b0e001d80040000005e510befccd7", 0x2e}], 0x1}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x10, &(0x7f0000000300)={r6}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f00000000c0)={r6, 0xd0e}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000080)={r2, 0x6, 0x4a, 0x40, 0xb5b, 0x9, 0x200, 0x289, {r6, @in={{0x2, 0x4e24, @rand_addr=0x64010100}}, 0x3ff, 0x13, 0x1, 0x6, 0x3}}, &(0x7f0000000140)=0xb0) pipe(0x0) socket$inet6(0xa, 0x0, 0x0) 02:21:59 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x1b12, 0x3, 0x1}) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket(0x2000000000000021, 0x0, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x24) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0x1}], 0x10}}], 0x1, 0xc000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, 0x0, 0x711, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x4}]}, 0x1c}}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0}, 0x20000000) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@ipv6_getaddrlabel={0x44, 0x4a, 0x300, 0x70bd2b, 0x25dfdbff, {0xa, 0x0, 0x1f, 0x0, 0x0, 0x7f}, [@IFAL_ADDRESS={0x14, 0x1, @ipv4={[], [], @remote}}, @IFAL_ADDRESS={0x14, 0x1, @empty}]}, 0x44}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8}]}], {0x14}}, 0x7c}}, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000540)={r4, 0x4, 0xff, "ff11714e7448f6dba6065632311dfff4b453560505c0187d4fd982ddde59d985f4cbd26537eac72309221a3ab8921acebfc796400ff734e5e190b778258ae8260473471392c73d3d6ee6916a911b8ba97f12723ae7e340984870bf0fb7c84ad51abcc14060d712953a07e27c19db6d22514a0b961affbcd16be32f1cc33b5eedd887025aeecc682c9b7507fdb4d92c44bd7474fd793af91e09d75000120d688c4639043210c3d204f9904edd"}) [ 3063.434400][T19235] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 3063.512675][T19237] IPVS: ftp: loaded support on port[0] = 21 [ 3063.530172][T19212] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3063.622488][T19235] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 3063.649739][T19237] lo speed is unknown, defaulting to 1000 [ 3063.664956][T19207] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3063.677595][T19250] netlink: 'syz-executor.2': attribute type 9 has an invalid length. 02:22:00 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x8943, &(0x7f00000001c0)={'caif0\x00', @ifru_hwaddr=@multicast}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x57, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="8800000024000b0f000000000000000000000000caa550945b3a602a0ee2d79ab8b22630bb99f0e15ca14b0475a1b6ca95d5f26e73aa12dcff20e900cdf932c87e8074b873b22e62c3258bf08c61493787f1c9955d249db70307c5c759e11a16bf5c974ab25d03383c3936bbc7bc801f0451405b2b06a23b90e48a73c22934c35de5c3fd45f98d0192f913e90100000016c84f3b19c4e397cd09b7cff0bc136195ec50dd5c040f041765fbf05762ae2e4e9a3115a526af12b80c5d63f144b4dac9c8d8dab990b2fadb8cb6c288c0a494e0fc307578346812c103cff6db216eef422447e5e36214e7e30a2aff5e210cd2c635b585cfb19892", @ANYRES32=r2, @ANYBLOB="00000000828441ffa4dcc7ffffffff000000000b0001006d717072696f0000580002000101000000000049000000000008000000000010000000000000000000000000000000000297e90df94296b82e61c6bcbcb8bd00000000000000006d19fb"], 0x88}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='macvlan0\x00', 0x10) [ 3063.773778][T19212] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:22:00 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a83587cff000100e9000500010047"], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x24000045) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000700)=0xffff7fff, 0x4) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="00000000000000002800fb6f60db011d76650100"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$sock(r4, &(0x7f0000000380)={&(0x7f0000000240)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000400)="c5a3d7ea11791cbdcf7c6f38e594943318eb9dec524cd786e28bb4015d545c920ae8bc188ffe1d6d1144637a7e9e15b0915f1ebfb24709a35e4ea0f61a5c34b90274bf483feecbaa35130d35e124b8997b2346779cff5f70a1fee5d0a93a7bbdad59487d459aad5f0100d8f821f9982320678c7ed8e3c7a521f28333feae6a0544da0f406f12b4fd8571", 0x8a}, {&(0x7f00000004c0)="f5f16d3b893ac5dfd41868c4c4036730d9af0f7e0fa043e70d850188a8628ea945219304f4da8047cdc5de3989581dda579e7961d138e3fe4df9739acc5924ac0046e6388cb3e5408a754b5ad9a02c98b427150e34bbc1cfad0986f7bb12750ed352acae25c86130ce2eebf5f39b34445d187fa3da459e1febe940e961f7b85dcccc7770400c2cc8c64f7b1d89f56ad5031143471d16cec212d501db32e4bd47a8b4d111ef48b1d82f3b9da495b5aabd9e3fecebf69ac4919651d79cfa929d70ce8047556d0f524f9d0ca38d", 0xcc}, {&(0x7f00000002c0)="994ad5", 0x3}, {&(0x7f0000000940)="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", 0x1000}, {&(0x7f00000005c0)="e0b1043528c1166e24a838c196bcd963f1e9cac3978e9d1779b7a78412ce91e27b9a71aaafa77773fd6bb1bf0d5ad4a75b3a83156c2188ad0603deabecd1d662862dc753bd7e08658080c417", 0x4c}, {&(0x7f0000000300)="dabaf0f6e9505ccd5bf08618e4b2fc53eb822fa11ac51c519c13a9e305e43b9e272ab83e25f2b405", 0x28}, {&(0x7f00000007c0)="a5ef92c385686e6e49fe0555c24a7a2ca927b2df7a6e079e11f34fb7019cb36dc7e8da91dab90dcc3e158fc1111a8a1ed2f29dd2545af0a863202307a5ce88868279c71fa2ac44bedc6392721540f9791e828dab657336bea58913270cfa24610b7c9f7ea4cc78702b48eca0fa2f4907c57cd22e39fba7a47151e926b51b8437d52c32223b5696fa181bc23d0a9461aca246ab77bf406c3782ab57fb74c7b7e9e96ffcaf592020ec", 0xa8}, {&(0x7f0000001940)="bbfe7bae5a30f28658ea50eb82b1b9ee18409a5af95594a33c34c041ce2a5a567d79a79919f062875db62734d8eeb660cd3aee2a9b113cea4040c27ff7ba9740bc08b1fb8deb1dd98681212bdb0fe745c5c1539e519029259b66f17e937d6a02a65f3b5befc640957aa3c64da1c94ca3f5c5d7a46e0816adc3cc006b0ffd6f96cedf1c0cac8579e6fb479621d2a7d3a18dcc546747136e5d46c25ece5d483820d16fbc216074330a7ba251e96611d3", 0xaf}], 0x8}, 0x20000000) ioctl$SIOCX25SCALLUSERDATA(0xffffffffffffffff, 0x89e5, &(0x7f0000000140)={0x0, "f091a4123831be2ec36628c5118e665afeec6fc32559981444d0cdb6d5a535c0136497588bd28dbf0e08d19bf2adf56592c7b2a226b83e75f6eef1a536f10c32e9ee5701029a0726e9dca339372e01c76eae5058650caf082060cd15ab088f59af294266e2f304d8872f34d7e13e46338579c9c78f022a1fb159f32d32f3bfb1"}) sendfile(r7, r1, 0x0, 0x100000001) recvmmsg(r7, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}], 0x400000000000061, 0x0, 0x0) [ 3064.081757][T19265] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.3'. 02:22:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x900}}}, 0x24}}, 0x0) 02:22:00 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'wg0\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r1, &(0x7f0000000140)={@val, @void, @eth={@link_local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4b549f", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}}, 0x4e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socket(0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) [ 3064.181264][T19265] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.3'. 02:22:00 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0004000200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) [ 3064.282233][ T29] audit: type=1804 audit(1595470920.608:4787): pid=19276 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir251561709/syzkaller.UZqFTe/3854/cgroup.controllers" dev="sda1" ino=16225 res=1 02:22:00 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000180)=0xc) socket(0x2000000000000021, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f00000000c0), 0x1081}, 0x38) socket(0x1f, 0x6, 0x8) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000040)={0x0, &(0x7f00000000c0)=""/168, &(0x7f0000000080), &(0x7f0000000b80), 0x3}, 0x38) [ 3064.329255][T19240] IPVS: ftp: loaded support on port[0] = 21 [ 3064.338843][T19237] lo speed is unknown, defaulting to 1000 [ 3064.348457][T19282] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3064.375025][T19285] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 3064.436770][T19285] netlink: 'syz-executor.2': attribute type 9 has an invalid length. 02:22:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x1, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) socketpair(0xa, 0x2, 0x7, &(0x7f0000005300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f0000005340)=0xfffffff7, 0x4) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@ipv4_newaddr={0x28, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}, @IFA_BROADCAST={0x8, 0x4, @rand_addr=0x80000000}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@ipv4_deladdr={0x20, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x8, 0x1, @empty}]}, 0x20}}, 0x0) [ 3064.563873][T19289] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3064.578008][T19294] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3064.908238][T19240] lo speed is unknown, defaulting to 1000 02:22:01 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=[@iv={0x0, 0x117, 0x2, 0x0, "15dc91768c78ba00960b7a5e4e7907526d7c7c8aee968a562b00cb905e1826a8f9ee0ac480576a7134801fc070041984c5c23fa0f93b59075853f70545ce9c61b15ff65cde5078b4209217f0220f0810f739bd470d405272edb16434a11869d08d8fef065de94710ee553b410c3c02a96c156836af8d11c4af4a77e766f9ed8ec43830fe02bb22babf9b41d4e5027b49ba3f720465bf4ee9b63892030f4fea97d94bc6cd1a7d4d6869cb3185e5da3ca0da"}, @op, @assoc, @assoc, @op, @op]}], 0x4924924924924b3, 0x0) setsockopt$netrom_NETROM_N2(r3, 0x103, 0x3, &(0x7f00000001c0)=0x3, 0x4) ioctl$FITRIM(r2, 0x40305839, &(0x7f0000000240)={0x0, 0x40000000, 0x2be20000}) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x10020, 0x4) sendfile(r0, r1, 0x0, 0xf03b0000) socket$inet6(0xa, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) [ 3065.296455][T19337] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 3065.316184][T19337] netlink: 'syz-executor.2': attribute type 9 has an invalid length. 02:22:01 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000180c2000000aaaaaaaaaaaa86dd604b549f0014060000000000000000000000000000000000fe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x4e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socket(0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) [ 3065.390367][T19240] lo speed is unknown, defaulting to 1000 02:22:01 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x2000, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a009f97adfc6dca5e6fc0dd9dbe2cb56f2d12e86df18f4f179756b615d9332f9649f67ede8c8307bd8e701b811a55b055a1570ae6bd6fc70426f42826055d2e97a91c3469168f27b2371d618a36294c6819348af30789bf8757", @ANYRES32=0x0, @ANYBLOB], 0x40}}, 0x0) socket(0x40000000015, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a009f97adfc6dca5e6fc0dd9dbe2cb56f2d12e86df18f4f179756b615d9332f9649f67ede8c8307bd8e701b811a55b055a1570ae6bd6fc70426f42826055d2e97a91c3469168f27b2371d618a36294c6819348af30789bf8757", @ANYRES32=0x0, @ANYBLOB], 0x40}}, 0x0) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x20, 0x3fa, 0x100, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000011}, 0x24000045) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000780)=ANY=[@ANYBLOB="afecac00a6b5ab3ef4eedce29143bcc1de0f56d707a32d40a807a0189510a6037bf141e9e45ccdc9845134722b9cf5ca3943d8cf3d8df79b000000588365547748565e3b3c2ec0b7a888dac020e37e0aec280c296fa6a9215c44fde1e73be4c22d4a1173400acf4631829165136c871bdae431f3024cfd5b7a1c8fd2bbd0d43bbd3885d83382c094a30c61760c7d7e320662d90c93c36853ff34c1251dc314405fa4390fd62cbfa4978dfa5f7022b40c8491923c9149d922683d814665dafeb38a5e4cee86c162b052fb22b7d5620ba5d9559aa635304a4f09903c8c71d7517a0a4448dca1fd1d84ea92ce1b1d7c0000020000005718549c78290058669437f4a69c174b8a4c78d477ace6c4c5082e8430871979ff29f53a753b07d6638887ee250286e047d2546592e286589f538971ab6735e85b5021927506c20fae16f8176a"]) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x8001a0, 0x66, 0x5ac484bb51fa106a, &(0x7f0000000380)="4d50b441e692763513ef874588a80000000100000000122e25d30806", 0x0, 0x403, 0xe00, 0x22d}, 0x28) 02:22:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xa00}}}, 0x24}}, 0x0) 02:22:04 executing program 4: unshare(0x40000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffff7f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') socket(0x0, 0x0, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$int_in(r5, 0x5421, &(0x7f0000001100)=0x6) listen(r5, 0x0) accept4$rose(r5, 0x0, 0x0, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r5, 0x89e4) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x49249249249265a, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="24c7d2ad6f5e802d69c9b085e23af6366ce8be7060788710ac9f61f427cdfdaba49a2046ec286c8faae4a2bb279bac869e66e4304f04126bbf221caf8779a7b477c3f0ed7f2eb19e44856341816e256656b68226ce6efa5f736abddf27de2917e915a21e3e7e3b1101046d7246d18fcea6ec2d2bc970a55497346155334028b645e3e48db404b77476f82a188ec60e33accffc4f2c1ccef0bffc5a3106afac18331f92948a16dc49683e2d71c0f78e29783e336648160e7ecff28953b5b071"], 0x3c}}, 0x0) 02:22:04 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0005000200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) 02:22:04 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) socket$inet6_icmp(0xa, 0x2, 0x3a) socket(0x9, 0x0, 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(0xffffffffffffffff, r1, 0x0, 0xfffb) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'\x00', 0x801}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x336) close(r2) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r2) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = gettid() syz_open_procfs$namespace(r4, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000100)) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000001000)=""/102400, 0x12a933, 0x800, 0xffff0001, 0x1}, 0xc) 02:22:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xc00}}}, 0x24}}, 0x0) 02:22:04 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r1, &(0x7f0000000140)={@val, @void, @eth={@link_local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4b549f", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}}, 0x4e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socket(0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r6, 0x301}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r6, 0x501, 0x9, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x38}}, 0x200088c0) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 02:22:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') r4 = socket(0x10, 0x80002, 0x0) recvmmsg(r2, &(0x7f0000000580)=[{{&(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f0000000440)=""/221, 0xdd}, {&(0x7f0000000700)=""/143, 0x8f}], 0x3, &(0x7f00000007c0)=""/114, 0x72}, 0xffff8001}], 0x1, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f00000008c0)={'erspan0\x00', &(0x7f0000000840)={'tunl0\x00', 0x0, 0x7800, 0x40, 0x1ff, 0x5, {{0xc, 0x4, 0x1, 0x19, 0x30, 0x64, 0x0, 0x8, 0x4, 0x0, @broadcast, @rand_addr=0x64010100, {[@ssrr={0x89, 0x1b, 0xbc, [@multicast2, @broadcast, @rand_addr=0x64010102, @multicast2, @multicast2, @private=0xa010100]}]}}}}}) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000900), &(0x7f0000000940)=0xc) sendmmsg$alg(r4, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=[@iv={0x0, 0x117, 0x2, 0x0, "15dc91768c78ba00960b7a5e4e7907526d7c7c8aee968a562b00cb905e1826a8f9ee0ac480576a7134801fc070041984c5c23fa0f93b59075853f70545ce9c61b15ff65cde5078b4209217f0220f0810f739bd470d405272edb16434a11869d08d8fef065de94710ee553b410c3c02a96c156836af8d11c4af4a77e766f9ed8ec43830fe02bb22babf9b41d4e5027b49ba3f720465bf4ee9b63892030f4fea97d94bc6cd1a7d4d6869cb3185e5da3ca0da"}, @op, @assoc, @assoc, @op, @op]}], 0x4924924924924b3, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xf46aa09e2acb3326}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x44, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1000}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1005}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x60, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x100000000}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x60}}, 0x0) [ 3068.336949][T19454] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 3068.355738][T19458] __nla_validate_parse: 9 callbacks suppressed [ 3068.355749][T19458] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3068.379458][T19454] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 3068.386033][T19457] IPVS: ftp: loaded support on port[0] = 21 [ 3068.459114][T19463] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3068.475894][ T29] audit: type=1804 audit(1595470924.798:4788): pid=19459 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir464691444/syzkaller.RbUOvR/3341/cgroup.controllers" dev="sda1" ino=16367 res=1 [ 3068.705603][T19471] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3068.778417][T19457] lo speed is unknown, defaulting to 1000 02:22:05 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000dd000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) connect$netlink(r0, &(0x7f0000000140)=@proc={0x10, 0x0, 0x25dfdbfb, 0x40000000}, 0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5800c85bfceee60007050000000000000000000000c500"/33, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736662"], 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x8, 'tbf\x00'}, {0x4}}]}, 0x30}}, 0x0) [ 3068.834119][T19492] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 3068.854013][T19458] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3068.865838][T19492] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 3068.955622][T19471] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:22:05 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x100}, 0x1c) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=[@iv={0x0, 0x117, 0x2, 0x0, "15dc91768c78ba00960b7a5e4e7907526d7c7c8aee968a562b00cb905e1826a8f9ee0ac480576a7134801fc070041984c5c23fa0f93b59075853f70545ce9c61b15ff65cde5078b4209217f0220f0810f739bd470d405272edb16434a11869d08d8fef065de94710ee553b410c3c02a96c156836af8d11c4af4a77e766f9ed8ec43830fe02bb22babf9b41d4e5027b49ba3f720465bf4ee9b63892030f4fea97d94bc6cd1a7d4d6869cb3185e5da3ca0da"}, @op, @assoc, @assoc, @op, @op]}], 0x4924924924924b3, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) connect(r0, &(0x7f00000001c0)=@in={0x2, 0x4e24, @remote}, 0x80) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000d7, 0x0) [ 3069.199280][T19505] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3069.231419][T19469] IPVS: ftp: loaded support on port[0] = 21 02:22:05 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x30) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8}]}], {0x14}}, 0x7c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x4048046}, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000080)={0x6, 0x3, 0x3, 0x200, 0x200}) poll(&(0x7f0000000000)=[{r1, 0xb0a2}, {r0, 0x9}, {r2, 0x100a}, {r0, 0x84}, {r0, 0x10}], 0x5, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x1a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd4a, 0x0}, 0x40) [ 3069.267548][T19511] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 02:22:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xe00}}}, 0x24}}, 0x0) 02:22:05 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r1, &(0x7f00000001c0)={@val, @void, @eth={@link_local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4b549f", 0x9c, 0x6, 0x0, @empty, @local, {[@routing={0x0, 0x10, 0x1, 0x40, 0x0, [@empty, @ipv4={[], [], @multicast2}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @local}, @mcast2, @loopback, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, [], 0x1}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}}, 0xd6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socket(0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 02:22:05 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0006000200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) [ 3069.401099][T19523] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3069.497792][T19536] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3069.537106][T19538] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 3069.549108][T19538] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 3069.588390][T19469] lo speed is unknown, defaulting to 1000 [ 3069.594538][T19457] lo speed is unknown, defaulting to 1000 [ 3069.602455][T19536] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3069.921107][T19538] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 3069.935809][T19538] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 3070.042626][ T21] tipc: TX() has been purged, node left! [ 3070.212590][T19469] lo speed is unknown, defaulting to 1000 02:22:08 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0006000200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) 02:22:08 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpu.stat\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x2343a726) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) mmap(&(0x7f000002a000/0x2000)=nil, 0x2000, 0x0, 0x8013, r0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000240)=0x80, 0x4) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x138, r3, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xff2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2896}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffc0}]}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfb1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) 02:22:08 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0005000200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) 02:22:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x2000}}}, 0x24}}, 0x0) 02:22:08 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0007000200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) 02:22:08 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f0000000200)={0x8, 'veth0_to_bond\x00', {'bridge_slave_1\x00'}, 0xfff9}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000090ac9df00000000000000000000000008000540000000280900010073797a300000000008000a40000000000900f9ff72797a3100000000080003400000000f08000640000000000800074000000000140000001100010000000000000000000000000a"], 0x7c}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000018016000000aaaaaaaaaaaaa6dd604b549f0014060000000000000000000000000000000000fe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x4e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socket(0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x20001, 0x0) ioctl$TUNGETIFF(r5, 0x800454d2, &(0x7f00000001c0)) [ 3072.372756][T19621] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 3072.391383][T19621] netlink: 'syz-executor.4': attribute type 9 has an invalid length. 02:22:08 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpu.stat\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x2343a726) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) mmap(&(0x7f000002a000/0x2000)=nil, 0x2000, 0x0, 0x8013, r0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000240)=0x80, 0x4) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x138, r3, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xff2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2896}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffc0}]}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfb1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) 02:22:09 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x208e257) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=ANY=[@ANYBLOB="000000000000000017010000020000000000000015dc91768c78ba00960b7a5e4e7907526d7c7c8aee968a562b00cb905e1826a8f9ee0ac480576a7134801fc070043684c5c23fa0f93b59075853f70545ce9c61b15ff65cde5078b4209217f0220f0810f739bd470d405272edb16434a11869d08d8fef065de94710ee553b410c3c02a96c156836af8d11c4af4a77e766f9ed8ec43830fe02bb22babf9b41d4e5027b49ba3f720465bf4ee9b63892030f4fea97d94bc6cd1a7d4d6869cb3185e5da3ca0da0000000000000000000000170100000300000000000000000000000000000000000000170100000400000000000000000000000000000000000000170100000400000000000000000000000000000000000000170100000300000000000000000000000000000000000000170100000300"/320]}], 0x4924924924924b3, 0x0) getsockopt$ax25_int(r1, 0x101, 0xa, &(0x7f00000000c0), &(0x7f0000000140)=0x4) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a83587cff000100e9000500010047"], 0x1}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 02:22:09 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x2, 0xf, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x40}}, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30) [ 3073.026017][ T29] audit: type=1804 audit(1595470929.348:4789): pid=19661 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir251561709/syzkaller.UZqFTe/3858/cgroup.controllers" dev="sda1" ino=16367 res=1 02:22:09 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) 02:22:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x2a66}}}, 0x24}}, 0x0) 02:22:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x2000}}}, 0x24}}, 0x0) [ 3073.306767][ T29] audit: type=1804 audit(1595470929.628:4790): pid=19674 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir251561709/syzkaller.UZqFTe/3859/cgroup.controllers" dev="sda1" ino=15793 res=1 [ 3073.450003][T19677] __nla_validate_parse: 8 callbacks suppressed [ 3073.450014][T19677] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3073.554599][T19678] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3073.606472][T19680] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3073.651485][T19681] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3073.671748][T19683] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:22:10 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="900000001000432408e623a2fb914371e9db5600", @ANYRES32=0x0, @ANYBLOB="b5219e774b00000008000a00", @ANYRES32=0x6, @ANYBLOB="6800120308000100677265005c00020008000400ac4ce65e420eb65f1414bb08000600ac1414aa08000600a9fe15bb08000700ac1414aa080007000000000008000700ac1e0101"], 0x90}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x0, &(0x7f00000007c0)=ANY=[@ANYRES16]}], 0x1, 0x0) accept$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$AUDIT_TTY_GET(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x10, 0x3f8, 0x100, 0x70bd28, 0x25dfdbff, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x800) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000081c0)=0x0) r5 = gettid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000008280)={&(0x7f0000008180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000008240)={&(0x7f0000008200)=ANY=[@ANYBLOB="0500ff00", @ANYRES16=r3, @ANYBLOB="10002bbd7000fddbdf253100000008005200", @ANYRES32=r4, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="0c0099000101000002000000"], 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x8000) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) recvfrom$phonet(r6, &(0x7f00000004c0)=""/228, 0xe4, 0x43, &(0x7f0000000600)={0x23, 0x9, 0x17, 0x5}, 0x10) ioctl(r1, 0x6, &(0x7f00000001c0)="11edadeeeff48399e679dc45d6ec56d57dc2577cb0e06ad925c5829d4b4e797e6e15b0c0d5c05cf743f5507b8c2faf820ff57cbbba6e3460051e655f0fee10a86c5b29d843c62f73f2c54228319ede7e336fb9b2f36c672a6be9abf929a0cf9b686ad503c24d7a82dc8d6c62e8cae777ca2e082cd7d0d129531982ca5f7805eca3776dc0a56d678f545242c7c217e1782a25af32378b418559bcf7ddd1a7f91ea14c49679cf2a6e2d41f05586894a06d94953de73a136e3444b7368f1e8242337b63f0ed0b1d4124b741c8e6e9dcf4340d34205e") r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x8) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000440)={0x0, @llc={0x1a, 0x305, 0x8c, 0x7, 0xff, 0x5}, @generic={0x0, "224fa9d0c7dddd0de387d816a1b9"}, @isdn={0x22, 0xed, 0xb8, 0x6, 0x4}, 0x800, 0x0, 0x0, 0x0, 0x100, &(0x7f0000000400)='ip6gretap0\x00', 0x9, 0xfff, 0x6}) 02:22:10 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @rand_addr=0x64010100}}) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000180c2000000aaaaaaaaaaaa86dd600000000000000000fe8000000000000000000000000000aa00"/62, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x4e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socket(0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) splice(r0, &(0x7f00000000c0)=0x3f, r3, &(0x7f00000001c0)=0x800, 0x1, 0x3) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 02:22:10 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0005000200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) [ 3073.723754][T19684] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3073.757588][T19667] validate_nla: 3 callbacks suppressed [ 3073.757599][T19667] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 3073.801472][T19677] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3073.996867][T19683] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:22:10 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f00000000c0)="37aee8f6faea3511bec093", 0xb}, {&(0x7f00000001c0)="add4a06dc2baaea72ceb988f1917f72e3a31f0247c32d82e04f8f2e29e91744b0a7c4beca1b3081760fe773d24f8e37746070cb58915639b1934f4c56e46", 0x3e}], 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8}]}], {0x14}}, 0x7c}}, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x400443c9, &(0x7f0000000040)={0x0, 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0xe) 02:22:10 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0008000200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) 02:22:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x3f00}}}, 0x24}}, 0x0) [ 3074.073928][T19716] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 3074.097132][T19716] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 3074.194921][T19741] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 02:22:10 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001700)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB="b511ca1d57a24500e1d5dea0405024a8a29e7b01b2999b372c7982af1531e2121c13b9d99449bce97e03c9233da56d3ce9058703c85ae9c8a01079f8715d7a4c8a789942a5a5511ca5a44aae56203be433f43aaddf527c47d8ae3cefdde104a8a37b1d79658fc1e87c05a2e5458ed661"], 0xb8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8}]}], {0x14}}, 0x7c}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000000c0)={r1, 0x8, 0x8, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x3000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000000000000000000000000000000a20000000000a01000000000087a3db98000000000900010073797a300000000084000000080a8381933a00000000000000ff0f000000000000797a30000000000c00024000000000000000032e000240"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x100000001) [ 3074.409978][ T29] audit: type=1804 audit(1595470930.728:4791): pid=19754 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir464691444/syzkaller.RbUOvR/3349/cgroup.controllers" dev="sda1" ino=15874 res=1 [ 3074.464134][T19745] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3074.473993][ T29] audit: type=1804 audit(1595470930.768:4792): pid=19756 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir464691444/syzkaller.RbUOvR/3349/cgroup.controllers" dev="sda1" ino=15874 res=1 02:22:10 executing program 3: mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x853fa000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xe, 0x10, r0, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0x1200, 0x100002c8a) write$cgroup_int(r0, &(0x7f0000000080), 0x12) 02:22:10 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0009000200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) [ 3074.530644][T19742] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 3074.555688][T19759] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 3074.679405][T19766] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 3074.708435][T19766] netlink: 'syz-executor.2': attribute type 9 has an invalid length. 02:22:11 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20, 0x0, 0x1}) pwrite64(r1, &(0x7f00000002c0)='_', 0x1, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)=0x1000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x10, &(0x7f0000000300)={r5}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={r5, 0xd0e}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={r5, 0x9, 0x10}, &(0x7f0000000080)=0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 02:22:11 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r1, &(0x7f0000000140)={@val, @void, @eth={@link_local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4b549f", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}}, 0x4e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socket(0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) splice(r5, 0x0, r7, 0x0, 0x20000000003, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f00000000c0)={0x20000008}) [ 3074.722672][ T29] audit: type=1804 audit(1595470931.048:4793): pid=19767 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir464691444/syzkaller.RbUOvR/3350/memory.events" dev="sda1" ino=15905 res=1 02:22:11 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB='f\x00'/12], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={@cgroup, r0, 0x11}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x11}, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000300)=0xf5f735c286f9d4df, 0x4) r2 = socket(0x15, 0x80005, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c) socketpair(0x11, 0x5, 0x3, &(0x7f0000000540)={0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000340)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="cb0209f33a611ab4344ccd041f7b83d3", @ANYBLOB="de24f9fda7c660118d6aa34bd0b310882a7c32b943de93de17f3d64b61513ea125b54189f256256d8e67bfe83417de9430a687c110f108abd0343a", @ANYBLOB="000225bd7000fddbdf250a0000000800090005ac0f000800090005ac0f0012000a000e67f6461d0c97d3b5411d2559e100000800090005ac0f000800090001ac0f000d000a008e668184fe0b7ebd8e00000020006e80040002000400020004000100240002000400020004000100040001000800370001000000440050800900010017fb03f8d10000001300040066251b35ff47b664a57b459bf1fc1a0009000100105617631a00000009000100a68da4186e0000000800030001ac0f00"], 0xc4}, 0x1, 0x0, 0x0, 0x40010}, 0x8000) recvmmsg(r2, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000a40)='cpu.stat\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r5, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x5c, r6, 0xc3a82d2bcad6ba94, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0x10, 0xa, "4582630d245e009f35d2bf0b"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="949b1328f316"}, @NL80211_ATTR_MAC={0xa, 0x6, @dev={[], 0x12}}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4080091) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f0000000080)={@none, 0x7}) [ 3074.827689][ T29] audit: type=1800 audit(1595470931.078:4794): pid=19767 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=15905 res=0 02:22:11 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8}]}], {0x14}}, 0x7c}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='veth1_to_hsr\x00', 0x10) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r1, 0x50) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x2d}}}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_LIST(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40000) listen(r2, 0x50) 02:22:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x4000}}}, 0x24}}, 0x0) [ 3074.951163][ T29] audit: type=1804 audit(1595470931.078:4795): pid=19767 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir464691444/syzkaller.RbUOvR/3350/memory.events" dev="sda1" ino=15905 res=1 [ 3075.037194][ T29] audit: type=1804 audit(1595470931.098:4796): pid=19767 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir464691444/syzkaller.RbUOvR/3350/memory.events" dev="sda1" ino=15905 res=1 [ 3075.121153][ T29] audit: type=1800 audit(1595470931.118:4797): pid=19767 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=15905 res=0 [ 3075.235298][ T29] audit: type=1804 audit(1595470931.118:4798): pid=19775 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir464691444/syzkaller.RbUOvR/3350/memory.events" dev="sda1" ino=15905 res=1 02:22:11 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20, 0x0, 0x1}) pwrite64(r1, &(0x7f00000002c0)='_', 0x1, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)=0x1000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x10, &(0x7f0000000300)={r5}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={r5, 0xd0e}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={r5, 0x9, 0x10}, &(0x7f0000000080)=0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) [ 3075.332968][T19766] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 3075.353465][T19766] netlink: 'syz-executor.2': attribute type 9 has an invalid length. 02:22:11 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000480)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x1, @remote}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xcc}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000000) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000480)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x2, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 02:22:12 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000180c2000000aaaaaaaaaaaa86dd604b54000000000000fe8000000000000000000000000000aa00000000000000200000000000000000000010", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x4e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socket(0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 02:22:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x4800}}}, 0x24}}, 0x0) 02:22:12 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20, 0x0, 0x1}) pwrite64(r1, &(0x7f00000002c0)='_', 0x1, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)=0x1000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x10, &(0x7f0000000300)={r5}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={r5, 0xd0e}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={r5, 0x9, 0x10}, &(0x7f0000000080)=0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 02:22:12 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a000a000200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) 02:22:12 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20, 0x0, 0x1}) pwrite64(r1, &(0x7f00000002c0)='_', 0x1, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)=0x1000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x10, &(0x7f0000000300)={r5}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={r5, 0xd0e}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={r5, 0x9, 0x10}, &(0x7f0000000080)=0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) [ 3076.100254][T19850] netlink: 'syz-executor.2': attribute type 10 has an invalid length. 02:22:12 executing program 1: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x4080, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) poll(0x0, 0x0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, &(0x7f0000000100), &(0x7f0000000200)=0x1b) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x65c15bf2) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x65c15bf2) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) pipe(0x0) recvmsg$qrtr(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xd, &(0x7f0000002640), 0x3, &(0x7f0000000240)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRES64, @ANYRESDEC, @ANYRESHEX, @ANYRES32=0x0, @ANYRESHEX, @ANYRES16, @ANYRESDEC, @ANYRESDEC], 0x10c8, 0x2083}, 0x38, 0x44) socket$inet_icmp(0x2, 0x2, 0x1) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000080)={0x8, 'veth0_to_team\x00', {'geneve0\x00'}, 0x98}) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x5, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x5, &(0x7f00000001c0)=0x7, 0x4) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000300)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @null, @null]}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="162a3bd6977842aeb6f753bafacc007e81d1499bda6c94014be23222c46aa5292884413e1362337e44eb98642969c11d6130e87c5eec1e9d3614e80813437a6626de395bcb67557f618c7821ddd7052f1693b9aebcafba915903deef77de022ef60d20129df2482a0ea6f4ca61863d816336f42e863d9835ff162420b007ed086f79bf2ea80d0e90e2d077425f8bf189e6a6a8d77a5ca173878f897305bf3f489973b7ee4d9f8ed0b7679d8946a505744439ef23e2ff31629e35dea8f52927c74529c956c1db80be0a4c6126e3f44216fc819a4eb30f968350f2cf298ce255f2cf9e348cd2707e62bd08f17d567a", 0xee}], 0x1, &(0x7f0000000480)=[{0xc8, 0x118, 0x1, "32571469c07e413a99d53ef0a8eafe53cf754dac7b454af3be7ca65676d007881d7201fa2dfa00f0c65314e6b60835867098e6eec81763283776d5ad8c298a6fd4d01173c1aeece05e03de75f69f1a46b467bb57a4309e3c0a410194f9f950c3c111e352f5e48c73b2e135ce4c085d5db31429e4dcfbbfc2f584ead3d83969ffe03403483e6a8e3640d8a3f407d1a639578d6916eb982edd125661ed6da08062e4337c1da8e6b3578e843a04ae27aa695141a793ea"}, {0x98, 0x105, 0x200, "d2fa878282d64605472f72c9d91cfaa2f0ce16ec123082983c7118bbac68705d145710223eed4d30ce64162bec75daaf1d67dc6280612168e0863827307188369f490b11d34f97b127b6e4f74c4c5c52d52261c4dc6ea4178687d664e17ef860559f0d5816569f9182df545fe94393e7681f910671992fd2ec349ecffb08b449eecc9f329646db57"}, {0x38, 0x118, 0x1, "72a02c095fb892deb5ca67f51623a96dce6c74d38284af4bf04c0abe8e1162d3c72d28"}, {0x30, 0x0, 0x3, "b9520c613cfed557b76917c4d1cd2949f521aa6f520a942cf6402b1bb9af"}, {0xf0, 0x118, 0xfff, "4ef919a23fbb38ac343c9f62133e3ecc5eb2059ae03043d68af735d60f467ff54b21f5c8560f0f7ceab87705cc42e06571e0fd3cabaaddd78566d25e2ba64b02fb8b24abcfe805e0f7c9e7c5c78c6fd89ebb75e9df6f5db075d6374f6e076f57f08ecdfacfdca5bd4f4bc27379b05918822c2af545e0b142a4db5497b60ad9b0a453a01962a551b96c1fc9bdd9953a1160a4a62602426a975cd8ec850bc3e6f79112c5e76585551edc18c7e081bda14d5c65ac3901474f617cdc099add43c29fefb8c22af17ad9fa8053796a7dbf893e5cd4b7f37b61052c0000000000000000"}], 0x2b8}}], 0x1, 0x4000000) 02:22:13 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xe000000, &(0x7f0000000180)=[{&(0x7f0000000000)="2e000000120081aee4520cecff0e00fa078b5bdb4cb904e473730e55cff26d1b0e001d80040000005e510befccd7", 0x2e}], 0x1}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x10, &(0x7f0000000300)={r5}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={r5, 0xd0e}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000002500)={r5, @in6={{0xa, 0x4e21, 0x800, @mcast1, 0xfffffff9}}}, &(0x7f00000025c0)=0x84) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e2c, 0x0, @ipv4={[], [], @local}}, 0x1c) preadv(r2, &(0x7f0000002480)=[{&(0x7f00000000c0)=""/168, 0xa8}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/219, 0xdb}, {&(0x7f0000001300)=""/25, 0x19}, {&(0x7f0000001340)=""/65, 0x41}, {&(0x7f00000013c0)=""/152, 0x98}, {&(0x7f0000001480)=""/4096, 0x1000}], 0x7, 0x6) sendmmsg(r2, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000002600)="73aa9bd014ecb9a934c1e4d3c3c05d1b3fcdddd13fb3789d85c44f6b9b6cfc9246b22ba7db53b0784fdaf0970b98ab75b6fc85de7e97e3abd73e11febb750b3bacff31736e5bcf497eb45e21244ba7ad031a63a5ad9ce0ad6278704963aa52e4efc5d83caa7c4b04c0b8b4d8c577d2c1a76a22b8fa9b669e69b5416c33d40bbce9e449", 0x83}, {&(0x7f00000026c0)="d3e835007431621751ea3118fed0a6d90bb80f0accb84b0ea3296fbdd0eb71396af393beabd7a27e34f73d398a25dd61e1a6ad73cebba5b17a925fb524a3a00468d1e009df901b3dd764984099bca61e5de3c2bba8ea3151c51568f45ae629eacd37963600542a383aa74608c678ef6fc696136262743ba59e44bf98f571682f885d73c93f7da1e020d45e656ddcb9f5a4ffd5580ee2584e4aef2016fba83650cd40a0309506fa3cbc5a34f87585c3c242c10ea8969f3b64e74b8ac3913d0a99a2700008b0c816ffacdbefa16e87a88a031b113c8183944c299db0fe76c285f7d14c04925628712ac9054ca3cd88433f", 0xf0}, {&(0x7f00000027c0)="ed4204ea5d35d773c7fccb30eb2a372de275e4089dc77dd7321fbba68f0ee9b90646da30ea069c1b5300ad9f02b55e04462009601c02688962658969dc808bf8ec040d8094123e9780354ab282671d3e2ec5f9c899e58248b738d935f4f3293f06ad93f13cf10007bb5157132de10f63d46c8661846a5863f0b5b58a6ef0dce9cb540db89e3b2fe7", 0x88}], 0x3, &(0x7f00000028c0)=[{0x88, 0x119, 0x401, "dbb1fac5b195823253cc3d5f42c596dbe950877567d18314e351cb2e07469680398c2311785c210cc41ff597ee70df78fb09a27434a88a3ff1fcdf98b0c0f28abc94835bd91b38dab8777ad01add8220868b728373623337ddf50f4443f168686a8ed0b676fe94571054fdf2956dbc0fb7774aa9"}, {0xa8, 0x1, 0x3, "d2ebd3f8a67b62149601753ee0305914d9747d08a68e1776d98c9d17276b25d89809b77ff9ae4a80af18d7748f84b3b300f12d629e0f05b4e14043adc4ca855355baa8b9382fe61920d0d3809af8ced456cf6692b319c909dc2829b43810ab42262218068cf7301ee6f0192f8cb89505aeda1634dc27eff462839b94a3f78bec95786972086414742229ddd0442fcb4fae592a00559a"}], 0x130}}], 0x1, 0x80848d0) sendfile(r2, r1, 0x0, 0x8000000000004) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0xe, &(0x7f0000002780)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffe, 0x3, 0x2}, 0x10, 0x0, r1}, 0xfffffffffffffeb4) r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r6, r0}, 0x10) close(r7) 02:22:13 executing program 3: socket$packet(0x11, 0xa, 0x300) socket(0x0, 0x8000000000000003, 0x0) socket(0x10, 0x8000000000000003, 0x0) r0 = socket(0x10, 0x3, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000a40), &(0x7f00000033c0)=0x4) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040), 0x260) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd604e96e100202b00fe880000000000000000000000000001fe8000000000000000000000000000aa0002020100000000ff0400000000000000"], 0x0) recvmmsg(r0, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/181, 0xb5}], 0x1, &(0x7f0000000180)=""/212, 0xd4}, 0x10001}, {{&(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)=""/104, 0x68}, {&(0x7f0000000380)=""/40, 0x28}, {&(0x7f00000003c0)=""/232, 0xe8}], 0x3, &(0x7f0000000500)=""/144, 0x90}, 0x1}, {{&(0x7f00000005c0)=@nl, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000640)=""/190, 0xbe}, {&(0x7f0000000700)=""/173, 0xad}, {&(0x7f00000007c0)=""/254, 0xfe}], 0x3, &(0x7f0000000900)=""/137, 0x89}, 0x3}, {{&(0x7f00000009c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private0}}, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000a80)=""/4096, 0x1000}, 0x7ff}, {{&(0x7f0000001a80)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000001b00)=""/241, 0xf1}, {&(0x7f0000001c00)=""/218, 0xda}, {&(0x7f0000001d00)=""/150, 0x96}, {&(0x7f0000001dc0)=""/225, 0xe1}, {&(0x7f0000001ec0)=""/53, 0x35}, {&(0x7f0000001f00)=""/7, 0x7}], 0x6, &(0x7f0000001fc0)=""/231, 0xe7}, 0x80000001}, {{&(0x7f00000020c0)=@ax25={{}, [@netrom, @null, @null, @rose, @rose, @remote, @netrom]}, 0x80, &(0x7f0000003180)=[{&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000003140)=""/31, 0x1f}], 0x2, &(0x7f00000031c0)=""/9, 0x9}, 0x5059af1}], 0x6, 0x20, &(0x7f0000003380)) 02:22:13 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=[@iv={0x0, 0x117, 0x2, 0x0, "15dc91768c78ba00960b7a5e4e7907526d7c7c8aee968a562b00cb905e1826a8f9ee0ac480576a7134801fc070041984c5c23fa0f93b59075853f70545ce9c61b15ff65cde5078b4209217f0220f0810f739bd470d405272edb16434a11869d08d8fef065de94710ee553b410c3c02a96c156836af8d11c4af4a77e766f9ed8ec43830fe02bb22babf9b41d4e5027b49ba3f720465bf4ee9b63892030f4fea97d94bc6cd1a7d4d6869cb3185e5da3ca0da"}, @op, @assoc, @assoc, @op, @op]}], 0x4924924924924b3, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, [], 0x36}, 0x1}}, 0x0, 0x0, 0x13, 0x0, "ea2794e8518a01d42fee574360d920df51d2eb3b0af3f65061f31f59b60c41728a8675859c6c5726ebce73d55de2632f9651810fb4f18bc844828386eaf9ea3c6b007e8286aabc303ff26ce428b914bd"}, 0xd8) sendmsg$NFT_BATCH(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8}]}], {0x14}}, 0x7c}}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r4, 0x8934, &(0x7f0000000040)={'veth0\x00', 0x9}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'macvlan0\x00', 0x0}) bind$packet(r3, &(0x7f0000000240)={0x11, 0x0, r6}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f00000000c0)=0x8000005, 0x4) r7 = accept(r0, &(0x7f0000000140)=@nfc, &(0x7f0000000080)=0x80) getpeername$llc(r7, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000002c0)=0x10) splice(r0, 0x0, r2, 0x0, 0x422, 0x0) 02:22:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x4c00}}}, 0x24}}, 0x0) 02:22:13 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a000b000200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) 02:22:13 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a000c000200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) 02:22:13 executing program 1: unshare(0x40000000) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000180)=0x8003, 0x5c) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}}) r2 = accept4(0xffffffffffffffff, &(0x7f00000001c0)=@nfc, 0x0, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000080)=0x3b, 0x4) sendmsg$IPVS_CMD_SET_SERVICE(r3, 0x0, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @private=0xa010102}, 0x10) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000300), &(0x7f0000000140)=0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0xd0e}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000240)={0x0, 0x40}, &(0x7f0000000280)=0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e22, @multicast1}}, 0x0, 0x1, 0x4, 0x0, 0xc}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000100)={'vxcan1\x00', {0x2, 0x4e20, @broadcast}}) 02:22:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x5865}}}, 0x24}}, 0x0) 02:22:14 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a000e000200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) [ 3077.735193][T19930] IPVS: ftp: loaded support on port[0] = 21 [ 3077.831970][T19930] lo speed is unknown, defaulting to 1000 02:22:14 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0010000200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) 02:22:14 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0011000200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) 02:22:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x6000}}}, 0x24}}, 0x0) 02:22:14 executing program 3: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffdfffffe, 0x8972, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x2}}, {0x2, 0x0, @remote}, {0x2, 0x0, @multicast1}, 0xd3c6b85bf6ebad7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000}) r2 = socket$inet(0xa, 0x2, 0x6) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x100000001) r3 = socket(0x3a, 0x4, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000001940), &(0x7f0000001980)=0x4) r4 = accept4(r2, 0x0, 0x0, 0x80800) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x9, 0x0, &(0x7f0000000080)) r5 = accept4$netrom(r4, 0x0, &(0x7f00000000c0), 0x80000) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x100000001) accept4(r5, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001600)={0x0, @in={{0x2, 0x4e24, @remote}}, 0xb2fe, 0x1, 0x7, 0xe5, 0xc0, 0x5}, 0x9c) [ 3078.509561][T19942] IPVS: ftp: loaded support on port[0] = 21 [ 3078.671987][T19967] __nla_validate_parse: 23 callbacks suppressed [ 3078.671998][T19967] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 02:22:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)={0xc8, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0x9c, 0xac, "257a813d8ad0e37d32eb14ba4c2bd788212af8f2f8923a1622a912bfb5e4bb1adb8bf954e728e9c7ffcbbb39be54a94d6c37fea43a6918b55ab9a08db037c43ec19b3ad2cb806c0e1641cfbe4b3dba1d68d34a99c4f7296bdd2eccf52d6c0eb295502ba04daba564a2f785c4300ecb21b9a2b29aed8040a41078df337f7d9bff3a8752901406a9e2b9551c6dedc9d85d0d894f83c6e18510"}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x100}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20008400}, 0x4000) sendmsg$NFT_BATCH(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8}]}], {0x14}}, 0x7c}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x24, 0x0, 0x2, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x11c}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x40}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010100}, @in6={0xa, 0x4e21, 0x0, @dev, 0x6}]}, &(0x7f0000000180)=0x10) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000001c0)={r7, @in={{0x2, 0x0, @empty=0x9000000}}, 0x0, 0x0, 0x0, 0x0, 0x326}, 0x9c) [ 3078.768316][T19969] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3078.790130][T19971] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:22:15 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0xfffb, @dev={0xac, 0x14, 0x14, 0x38}}}) write$tun(r1, &(0x7f0000000140)={@val, @void, @eth={@link_local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4b549f", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}}, 0x4e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x70bd29, 0x25dfdc01, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20004000) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000002540)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002500)={&(0x7f00000024c0)=ANY=[@ANYBLOB="ff000041", @ANYRES16=0x0, @ANYBLOB="000826bd7000fddbdf2502000000080002000200000008000200020000000800020002000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4048000) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$NLBL_CALIPSO_C_LISTALL(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24044054}, 0x40004) socket(0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'veth1_to_team\x00', 0x4000}) [ 3078.848275][T19930] lo speed is unknown, defaulting to 1000 [ 3078.911940][T19997] validate_nla: 8 callbacks suppressed [ 3078.911951][T19997] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 3079.037721][T19967] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 02:22:15 executing program 3: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffdfffffe, 0x8972, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x2}}, {0x2, 0x0, @remote}, {0x2, 0x0, @multicast1}, 0xd3c6b85bf6ebad7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000}) r2 = socket$inet(0xa, 0x2, 0x6) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x100000001) r3 = socket(0x3a, 0x4, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000001940), &(0x7f0000001980)=0x4) r4 = accept4(r2, 0x0, 0x0, 0x80800) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x9, 0x0, &(0x7f0000000080)) r5 = accept4$netrom(r4, 0x0, &(0x7f00000000c0), 0x80000) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x100000001) accept4(r5, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001600)={0x0, @in={{0x2, 0x4e24, @remote}}, 0xb2fe, 0x1, 0x7, 0xe5, 0xc0, 0x5}, 0x9c) [ 3079.095735][T19971] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:22:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x6558}}}, 0x24}}, 0x0) 02:22:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x6000}}}, 0x24}}, 0x0) [ 3079.605391][T20048] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3079.639907][T18383] tipc: TX() has been purged, node left! [ 3079.657715][T20053] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3079.688926][T20050] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3079.741609][T20048] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3079.782378][T20056] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. 02:22:17 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0x4}}]}, 0x3c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) 02:22:17 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0012000200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) 02:22:17 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8}]}], {0x14}}, 0x7c}}, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000200)={'veth1_to_team\x00', &(0x7f0000000240)=@ethtool_rxfh_indir={0x38, 0x3, [0x2577, 0xffffff00, 0x2]}}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="000000000180c2000000aaaaaaaaaaaa86dd604b549f0014060000000000000000000000000000000000fe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500000009001cb0cac4f43f743dfa5d3e8204395780000563c98f26f061b8ff13e725e91bbb2785d06d6ab9496bc5adcac53cc16c3ad8a485a8314af7137209d8c77a9c91da9e30fe30513fc8b11d09614a65d8894d1edb9833aeac6cf3353c91e492abe9f9886f50640c4ef"], 0x4e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socket(0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$TIPC_NL_PUBL_GET(r6, 0x0, 0x11) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 02:22:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x662a}}}, 0x24}}, 0x0) 02:22:17 executing program 4: r0 = socket(0x10, 0x800000000080003, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWSET={0x324, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_DESC={0x2f4, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0xe4, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ee66bd8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1f}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8a22}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x20}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe18ffd2f}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf6af}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x21e0}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffe}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xfffff233}, @NFTA_SET_DESC_CONCAT={0xbc, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x17b1}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2678}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ee}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}]}]}, @NFTA_SET_DESC_CONCAT={0x138, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa1d3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffff800}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5b4b}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd6}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x575}]}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}]}], {0x14}}, 0x34c}, 0x1, 0x0, 0x0, 0x40881}, 0x4040000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000004ccea4b1d42a886c0000001000561196184b2fe35b2508000080005551f2ca080005003e334de52bac3e47dcfc0ff1a1210dab7cc71358b1ced47c00"/75, @ANYRES64=r1], 0x20}}, 0x800) write(0xffffffffffffffff, &(0x7f0000000040)="2400000052001f00ff03f5f9002304050a04f50108000100", 0x18) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492805, 0x0) 02:22:17 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000300), &(0x7f0000000140)=0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0xd0e}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000140)={0x40, 0xd, 0x9, 0x4}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) recvmsg(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) syz_genetlink_get_family_id$tipc2(0x0) preadv(r3, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x7, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000100)='vcan0\x00') ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) 02:22:17 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0013000200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) 02:22:17 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x38}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=[@iv={0x0, 0x117, 0x2, 0x0, "15dc91768c78ba00960b7a5e4e7907526d7c7c8aee968a562b00cb905e1826a8f9ee0ac480576a7134801fc070041984c5c23fa0f93b59075853f70545ce9c61b15ff65cde5078b4209217f0220f0810f739bd470d405272edb16434a11869d08d8fef065de94710ee553b410c3c02a96c156836af8d11c4af4a77e766f9ed8ec43830fe02bb22babf9b41d4e5027b49ba3f720465bf4ee9b63892030f4fea97d94bc6cd1a7d4d6869cb3185e5da3ca0da"}, @op, @assoc, @assoc, @op, @op]}], 0x4924924924924b3, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f00000001c0)=0x800, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c0100002c00270d00"/20, @ANYRES32=r3, @ANYBLOB="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"], 0x11c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3081.298403][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 3081.298417][ T29] audit: type=1804 audit(1595470937.618:4801): pid=20099 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir805535454/syzkaller.0DLSKc/4216/cgroup.controllers" dev="sda1" ino=15809 res=1 [ 3081.359449][T20115] netlink: 'syz-executor.2': attribute type 19 has an invalid length. [ 3081.400524][T20115] netlink: 'syz-executor.2': attribute type 9 has an invalid length. 02:22:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x6800}}}, 0x24}}, 0x0) [ 3081.462030][ T29] audit: type=1804 audit(1595470937.678:4802): pid=20107 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir805535454/syzkaller.0DLSKc/4216/memory.events" dev="sda1" ino=16369 res=1 02:22:17 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x88042, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="00000002"], 0x2c) r2 = socket(0x10, 0x80002, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=[@iv={0x0, 0x117, 0x2, 0x0, "15dc91768c78ba00960b7a5e4e7907526d7c7c8aee968a562b00cb905e1826a8f9ee0ac480576a7134801fc070041984c5c23fa0f93b59075853f70545ce9c61b15ff65cde5078b4209217f0220f0810f739bd470d405272edb16434a11869d08d8fef065de94710ee553b410c3c02a96c156836af8d11c4af4a77e766f9ed8ec43830fe02bb22babf9b41d4e5027b49ba3f720465bf4ee9b63892030f4fea97d94bc6cd1a7d4d6869cb3185e5da3ca0da"}, @op, @assoc, @assoc, @op, @op]}], 0x4924924924924b3, 0x0) getsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000100)=0x3, &(0x7f00000001c0)=0x2) sendmmsg$alg(r2, &(0x7f0000003a00)=[{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000700)="a051167455d4d358013f85d143a51e71bb41d19c4878937f64720cb90be328c673864cbbdb1642ccc606cea3e1029378071a3a4d7b299bfc20bea1a5fdefeeb67c63e2ea7005576b233fb3bfbdfb34f2d22190cc12e9b629932dc005611c24d728e675212acda24de215e38ec27079723b70592c9e80410154a17e621f8c859e0e43a491da85bcca357fc930545c103c033850f540526089c590b877e9cca57009167e653ff1768780eebca383e77e0eaacdbde55879429aa34cc4f459ea736733d5b044ef9c439f4f648aa11b410e0b2343741fc62ebcda8b1079a871ab62001a1d0879c70058c8066e701a7da8be4990a73cb4704a9c05bea99c9c29b7972b36ef52c1ed64383c396df748a0de5133f8f34ef2358fdde3d9939b4c5af761f0f758239f39327363e19fd3df5fd863a6b1b7a0feef61ca8989c3cad4af395742df87d29639d24e411e3c468845076158cc3ab74540b05ef32c643c2cdcaea8830f29c029a5647537cd7067e5898a7d19b3d7c749fdb311f4f4907f0e19575e1f1e54210e6b05b95fdc4ec10d56e9e8b434071b24a1cfef8440794940e7b8cb7577edab6e3a81497547cf69784ec6717e2ea137f01d1b81ce2e48309d7512a7174e6b9465912da806503efe39487a7f122633deb87e49b7a52c5fdef3c13e5ffddadb100c3ddaf529210355cebee366be2cef4d27232c7830e0e775278ef38712a05f9676726a4a0fba33a1908816a0cd87e365726eac53d7eb563f2ef98457209197f7797be3d9996bbc5f142a64e9365ea56b3aaadb7ab7955964e3f45d45427cfc600eab5d8a57a9ad4db4535ec357c2ec01b09e343c84e00789b256dab802a9e3af0c1914095f33b2367fd1fa2063c5e0c608a238e4daaada2a72c8b151f19f0092a35f407fd7fac3346010adcf663a59a29d380601da1d7ef3befc449f651716f18c29f83a13c4f439073b1caa9e9607b9bd57f0aadca308d4cb95729d9a65a4c362bec06963e311d6f20eee85e288a79732e6d22ffda8cea01dc5cd188d56cbc4b83d3a14ec24f58f3250d17b62362ad0505e9d64bab9da7b3f9a64546fd5ab548c1899b4f91e9d8af80e0c0131e05d44eef0b404ee5c7f27fb7afc7ed3a23827550eb24ba33c75f75b70088f7a6306b6bda838be64aae465d1c08d650453661f323a02a481260573e28bb2a7d5e9b8b0d058486348004549766bea89f94614aeee15d67175f2d74f2a90a70db1f5f8d6e59bf7f7e2f2ceff917733eb17bbe980ff3b159cc5797db98a4b2b5803a840fe810429c9089ac597e39a67efafed0cefdb7086472017640639c65e9d6ca0ce5b313c87ec6778002015b5e4a0b9c757315e22cd27784d0aed5d56128b51712cedc115cfb55ef4621ff04a6c0da336aab602389f320c4b69dcf606ae814c9471ef66872dbf54666e3577eb1b47f350e1980bd1a813ac8a2353c9050ce282110d9b72a89a67e2414e3a000bb524509c75c3d61c98bb552c5ab87076f90fa50781f0a59fc65877021a69b999d0056a567412f4979d61df6700b324b4264b92f3a18d425fb33384689b2c02d512c547357f2f223ba3581d7ca2d6d28d0cb710dcac861d9b68ad5ccc310648afe7c89e48ec7151c97491629f52e229f5606a49bc27232adbb6cd311ede60ade8916ed400084faade8f8072b5e87aea425dbfb19cefbd8d0fac0b2827a1165d137e60474f4fda754646e71f19ae80f210d648659a8d60d39706a7d252787db60fa7042b5104cf4d0194a7af2128c3309d19d248fcd847ee08397a508b3f28d93ba613986386fd195fc24184499f75719495badefb0a9ff0fb7c85b6b45eefe83ba2a64727d46f593312fe4bf3184148ee9098adf834a7a9a94c956424cd787e3d8f866571cc392de0b3b27d6d914dba8b15323c9427c47191fc581bbae23f4e880895213d482ea6dc13ac5221f3943b0fd743a5a57a6e1fd73f91b49ca49d50cf0be05a48040295cfe60be9d2c48c77513f622ba4ffaa1a8a87d93c470523a3b65b65bdb0db5a5e2c7f37f43692c0ec608f67588db1d8a8f242d780b8ff5ee6d5cc5706c64addd2648122fdff76cca7042030563f2534766c3d28daed1840f726fbed034e1a8d9be933cb214f0b02c9e267abac6b5086d477ca9d4175b80c5d978dc9c054ecb4b875505992b49278ee37d912b367beb83aa14c29b9856ab42b55344f81352d69c1be23f4d3c1a2bc45fbc7f4187414958429e870f3ad12098bb5fc34ce57af36e049db58e0cd00c47f2cbfdb1bd76032c15ba00718eba20938d6d209831e2d32961aa5a8e23f0eac455a6a8ba62ed9bbd64044f5eea15cf3a0f03328e01b69518ab89395be0f55141349deb1e7db39aaa15b275e0e043c7d264756a9b89fb7f342b8eb67413cfa29d8c902ed585f3e1eb9116004a090639496fe25d79dd8bdd4134b4b5f54238ed2ecf28ddd34b24c68783b11ddee2e06bf7b8fccbf7943b177fdebfea0c82dd04235589045aa2b71446852b764eaffb0b8ea5a513cabb4bafa6563f83d5229efa34fbb573f65af127ac46480798033caef8b6d982061034233fe80886b4368055dc4019e9ae90f950100c866f5464b3f59cbedfff2451c43619619d098911b7142a6a5884430a79f9d3f19c42ce420f6daff253f583ea2d47a92839c2451b761149dce90b0058ebd1e2e139f5c5d412ef6e7e701b2b27a9d33eee93f8fe906e2a5e23188e02014c212fad64ef7b98b87d351a2d04322b315668a540ea4cba051f6093c7a933de06429853e100721247c48b1e15f242ba18de4facdbeb22693259ea46e42cb7c1846ddac53ddfffcf8c0dfa1f8d3e82638b5e2375f47fbb0b2bb7d10baf1f86478edcb0184c53ae8cd5073f991bd4ef58685d071e889ac9b7cc09d187ac1a9ca5c8d62eda73b78f65288d5791b125d05b08de5de45877d79f7ff71f4ac9dee5f8637b8a03ca963585ba8fd83c0efa1e8039d31eb33948745524e083c3398ab5d95a218d961b6120d4a28cfda346e49991d5c5713907256e07698e511d837f3bffd5a0f1bdead56aabb6c8d6ad11d12e632f77fdc5107731e00fd73f2aedc1a26c710225cd659323dfc0f6e5bde655738cf4ba25cd62f2fc5ba4f0700117eec1a82e6d6c22b5c26906ea98accdb45fdb16b12fb432ae7f3462fd0c1a31c6c0552045c64253ec3ac538287c58fd79622e6e669d0953fe89c0f520cd42980a9bbc35fe2563e5fbe56ffec30e1c46763aa981c6b2f84edec0677e2f7293dfb7f16ad33a43fe1d1ec293cfe11569b3e515f818730a0ae38068f9c852474c807f9461052180621f02376ac7fb67a00c16b173110fe35a49edd7290299ede5613059acc5a470683a2987e86f60b39638d7043601890087cd19f093cfcee788a3173d4f9ab9720bc9309f389ab662452a9f999f601315990a34af0bfaf18318f086b06227b34f84742474ebf5d59c960f1a121366929a73b2d6eeb4dae3eb614e42396ffd76d8bbc2002134fbb944f2c3f69bd8feffc795a5f50addef28347585c8c4a8b6f89400ee38744347426b8a9a4ce1f80f0384a4d64ceacb2362869f618b8b737a9f963a7e437a22796265e76fac3cb6ed9c66dab4c048af651e2391d3efba18afd45f06d94f40d2af32ba80a9c1faab73a189f0ca08313bd619cb5c4dd09ce77c765dcf48c3803875c64c66d9cef1f7ec534506668ebd32867fdc735f2bad08f1edcffba69d8c540e19c97701361fb20522ab8ee0d4f33fb479324b325363ba0ed7b7eafb74a955bc4d268939c8f798487917665431182ea891c5bd0f09858202ebad1963a06a34c67ad9bf17eaa5409bfad1f2cdbc98ca10d6695fdf89dfeb7d9820208f13f7b35767d19eb832dbdb35b2f801b2e76e28ae7a0a628643228bbe9ff185808b6fa684b7fed19756e727d83ee66921556a54431e7186785bef4e691129421a7960ba8c2a583485c6ff187834c5539d613fc5c779d266ff5e7de4e55af8998077394f9a0dcaf14623cac0c9df8891b55873b3dfbb5cec576a272af139f3dded04cd79544272b8d5b00f0b4e098fb1cdc28475594308e461657b37f611c72af25beebc05949c12f989d52ecfb4e60eda66f4fa8370ad993ef2a0e2ec4910c8adb378b310d9d2e620484b7c3d18e2ab6b646e61a80399b6f8de39fcb9d8eb26688b9be02a1041d1c3c07ca691e635e7073ad96ccea4603aef71877af51c530c2c45a5083ac47ca226d3cfd1748e2fed3a8fb7b7824ee084b5e5727694b7ceb142522008df10bf35022fd2929ec438fbba2f975aa817c0ef6857c91eeb17c36a8d96415039efa480a08a7f55e10384dc19092e4bae779b9686cf26fc8f40e08763bea62b7f1c7ca66d8b376ce4bcf0ae8e8b552867ce7340ca1adc81b96dd066ca399bcaf64b35e7393962363e85eeda1ac7dff0ebeae1e434612379aad433fdf537f50de7bf2a7880ae2c58c45cec7bfb4afb53da29266002a39274f32ecbcf5e2b49a43d3e01476b39ae14946649dac0deef4edcdc3620c6cd2fb7f28ae82b6efb9ce427f47a6375fac6264ffedf41b525be225ff69390fd60c97e8461e1ec84838ed776982b61710f239c9da0ab43e11f8559816d0faef59a8dceb93c691b51d3d573f4b8c82a5dad7dcaffac1e12f25a70c89aa4cdce3e87a1d57e4bdd9cac24546dd571c6e8da0d986509cd1a812726605236a33f741a7065fcfe012413f010cc85a3801643d9629a6cbf7752a37ed1e744a5897f02e98016e60cd6327139ee21e9d066900aa7b142a4b0afc6f1cc349deed977c1ae432877cb4757c7f9438b725c2b342f77ab33799bbe6037d16f24fdcc87ca1619d6fe9301b3cce66cf3248a8551952a7c93dd746c447bb08117d1df295f8a2a58b18264af5e984426ef9e5843915f950bd0c5c87dc1723ca5fdf370f62730d8ebc8e122cc381729d19da3e1b3b6ec198d2ac29f99237a70bc53798e025824215a5411e21fd5ae69490759d2962354532ff74116bae79bd7d47fc0357d779e7fc0f887aa27a3dac286ae9e3a9ad8ec76818ebb2e43bba422e4c77591131235acb66a61789d716cc946d6dc3e9b26a3456657da51ea7b1dfe6e93a7c85ec49404cc395bd92f147e3894f59edab66554be7122bc22a5aa35d1fc90c148c9f1a145f85260c02dcc841a44980d94c7ce8e086228c28e68cedc33e10261c720d3b6daa636c23008ec9ef7ab8005507cd9046073a50e6b87cea47b74e8484cf243d4e5e487605f2dca24d28abaa39cc5648571639213b893254d625eeebf8f343e8333c97d044f6351f57031dde30168b551b96989e549f7191483151c98f7bbeced5c1c30bd4792b7ef39ded79d2dcb40597b9c94023686862f893a27f698bf72598519fd27090945cfb746c01cb46d61f1f1f5bbcebdea26832c77ac5cb09a916c7d73f25829b2b5ad90a768464d17ab3d971db58dfe063e2cb0ba565c25bff826523b00e5a90b16d4395032791bcd079cbe5279a726c8cb32912aef7657755b2322fd08d49190e187d27e10e52f1e3bb88a1005fad5c9ead715317af86fdb6afe0212e29ebf8c79f2e03401cee77aa0e9faa408c13eef803f32667d6759f60658075a03bbe4686e0115a5631a221d58e3df8da5ca151fdd8126aecf4892764d3633b49c19eeffeafd46a5ea611baa685dfadf0cf6a00dd399c6df56dbaf9922db6b80682cf70db40f718649a71e59511759eff9a5299c0e786051a0a6c67d456ab23d1ef8a1851eda4668c8704a3a0f076565efc594ca8", 0x1000}, {&(0x7f0000000240)="54a4102db9e4addcae6ee8ae6015054ca1b9e107786aaf9a84681f14d2d3659e420f658a53bdc97fb3fa7add3a49765b80438f259144b56498c17908096fea8a92077e6935b876db6ea13decaa39db93fb92a113562655c61a82", 0x5a}, {&(0x7f00000002c0)="5146c99f3a2083143e87ee4717e885736b41dec0da983867eb06459fd34793aaa685183dbca1dbc0ea5b623ffe1e0536db8c43805482dbf5ab4c92a1636619e9e3ffdb666abd413ceaeec31fe65f7d193e7c5beac641050f445a85c771a72bddc2eee4907a181ef51330421a13d0f8c9ccb3556e4a758889d935f108ec3a4c5b23f7469ce86a9622e370be15048d2e3b0e0f32b053d7c2b02b6de5450c78bc6d27139251847b478bd42d0e27a3f38e6b00bb443984ba9b82d47a467b030d5a3fa84657153134a0d54d2c72a659e14a93c6705218", 0xd4}, {&(0x7f00000003c0)="8fea7692c0d662e33f33dc19daeacf864b2a96543608520e65", 0x19}, {&(0x7f0000000400)="8b5d4d558955d7d2985980e054dc005559c79c4a2acdf55a709d1e9ddfad5cbd4e030c9b37eeb0624726f84b673e76e744833598bbcd0fb654fa63f900ed3b893fcf7971558ccf82fdb16babb85fed3b3be6ccd88e27db", 0x57}, {&(0x7f0000000480)="7c7531660be1eab95ba1fdc48cee23cc43fe2b8a92930b71c3f8b4ef6688aeb3696ecb0bc52e007ff1c22d95be70ce2e02c8fcbdf31a2ce4ead5ed094ed62cc732c02c6c7d4e773f0a402460db4a1bb6568a064d78fb26397a3c951367b6a6e3fc776b41917139623f22cd6a821dde91a3d0c7086eb1b2f47d4dc9398d80c84b73e99b37c0abf28716cab24bec2b0cf8f2a2321acb8a5d857cc0703b0d48824aefb3d0e39969a1de8d6f77c280f5508f54fbc68b5f37fb9c8b073a363186408107e0f55a28a20e3bce14b4d9687ac38fb2f170444c9ecdb38d5f59006e635cc2033395de99f72bd3a9c7", 0xea}, {&(0x7f0000000580)="a778cd036d68eb77cd90be39af2acc683e243b9e15e493f2e9cedcfad2f5a972f69f926f50c67830aa1c0a3d70e084b3d3", 0x31}], 0x7, &(0x7f0000003ac0)=[@assoc={0x18, 0x117, 0x4, 0x13d}, @assoc={0x18, 0x117, 0x4, 0x1}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @iv={0x38, 0x117, 0x2, 0x1e, "1685112caa65bf0f5a76e80d1d21a77006931bfe0179c1cd07d0b20ad322"}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x40, 0x117, 0x2, 0x27, "38a8d022b80d206d597f556f7da72d789ca0f79c15402473de84d63d25ded0a967ba5f19316b50"}], 0x10d8, 0x4000}, {0x0, 0x0, &(0x7f0000003a80)=[{&(0x7f0000002840)="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", 0x1000}, {&(0x7f0000003840)="8e657e9414f71501debdb0aab313ec01cc021847cbb2c3165626e21ca125729f9ab5064a675f70e98aaf0d9c84eed0b1f925ebeab07ad4f671fdfb00fcb80a6a20a64cef3a4d0588ea687b1525119aecec169bac0723954d4ed9ddfb51c70b2fa52bb6464ab900c771c1079588d35437df6dd0bdb36672023888a1b0207fde5836fc983e5d28d7587de4e57314630124297dda0116c67441d27ba8b02c207b3d044c15b11dd25c4634e54d3e804f6c90d76366793293fdd65cf38cc04bc0b125ef92265d2eab6a3a5e70785d82c08c7a7618c5abf01e0d49767656270967bda05e037460b0", 0xe5}, {&(0x7f0000003940)="6bd4988d968371174b1a41b550b63da66a1d2cabf8716eba137fefc2478da395916ec6fe2a2472b133d5cac4e5f33ceedef305b44c2c1f71007ca13a54135e3877f5524f", 0x44}], 0x3}], 0x2, 0x1) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x18) [ 3081.610421][ T29] audit: type=1800 audit(1595470937.678:4803): pid=20107 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16369 res=0 [ 3081.724840][ T29] audit: type=1804 audit(1595470937.698:4804): pid=20107 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir805535454/syzkaller.0DLSKc/4216/cgroup.controllers" dev="sda1" ino=15809 res=1 02:22:18 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x100) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r2, 0x1, &(0x7f00000000c0)) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x3, 0x1, 0x0, 0x99}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8}]}], {0x14}}, 0x7c}}, 0x0) r5 = accept4(r4, 0x0, &(0x7f0000000080), 0x80000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="5b8fdf8938f0d3ae5ba3c8d2db392a0027685460a46bfc38b6373cb4c4e251266323b9b70b1c2d981e03ba5f0534005e091d0c953ca6547e16ef71a545bfa9bd5093fe96fb0a6b7b69d2b01af03d2bb908f9bdbf3c8b914ba3ed822ab682f988fbded76808d5be8235b1a500000000000000723e9085e965af69e78f00"/152, @ANYRES16=r7, @ANYBLOB="f1b52639fcaa47fd1919002dbd0300fffffff7000000000800010000000000000028b825f7d524a7056c08fb7ffe3eda00"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r8 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r8, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"/320], 0x140}], 0x1, 0x0) sendmsg$NBD_CMD_STATUS(r5, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, r7, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xc32}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x27b1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040)=0xffff, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) 02:22:18 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000180c2000000aaaaaaaaaaaa86dd604b549f0014060000000000000000000000000000000000fe8000000000000e00000000000000aa005f0b181d72a5ccffb7bd6577a637000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x4e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socket(0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) [ 3082.178443][T20159] netlink: 'syz-executor.2': attribute type 19 has an invalid length. [ 3082.254090][T20159] netlink: 'syz-executor.2': attribute type 9 has an invalid length. 02:22:19 executing program 1: getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000180), &(0x7f00000000c0)=0x68) unshare(0x40000000) setsockopt(0xffffffffffffffff, 0x43, 0x98b, 0x0, 0x0) socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000400)=@assoc_value, 0x8) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40}, 0x4000000) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="44000000020301032bbd7000fddbdf250301000001000700000000002436ba79ea68529ef92b64a2922038947a21deb6b100a73c71ce5dda2996fd82c6adda134fb2026da761b003491bded36df62549e726110903e7519121e19e5ca5000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x2004c080) splice(r2, 0x0, r0, 0x0, 0x400fffe, 0x0) [ 3082.835324][T20178] IPVS: ftp: loaded support on port[0] = 21 [ 3082.957760][T20178] lo speed is unknown, defaulting to 1000 02:22:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x6c00}}}, 0x24}}, 0x0) 02:22:19 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0018000200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) [ 3083.188457][T20198] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 3083.244685][T20200] netlink: 'syz-executor.2': attribute type 9 has an invalid length. 02:22:19 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0028000200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) [ 3083.476108][T20206] netlink: 'syz-executor.2': attribute type 9 has an invalid length. 02:22:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getpeername$unix(r5, &(0x7f00000002c0)=@abs, &(0x7f00000000c0)=0x6e) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705fcffffffffffffff00001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003840)=@delchain={0x30, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0xd, 'bpf\x00'}, {0x4}}]}, 0x30}}, 0x0) 02:22:20 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') recvmmsg(r3, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x500, 0x500}}], 0xf, 0xbc0e, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="0307008300fffffcfe000100000004000180"], 0x18}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r4, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x7ff}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0xfffff000}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x20}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0xeda1}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x7f}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x3}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x10) close(r2) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x13) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000180c2000000aaaaaaaaaaaa0080604b549f001406000000000000000087a08634a351b54dc523001d00000000000000fe800000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x4e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socket(0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) [ 3083.730211][T20199] __nla_validate_parse: 15 callbacks suppressed [ 3083.730223][T20199] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3083.828420][T20201] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3083.844137][T20202] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3083.865314][T20210] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3083.894898][T20178] lo speed is unknown, defaulting to 1000 02:22:20 executing program 4: r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x1ff}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @multicast1}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) shutdown(r0, 0x1) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000003800)=[{&(0x7f0000000200)='h', 0x1}], 0x1}, 0x4004010) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"/317]}], 0x4924924924924b3, 0x0) r2 = accept$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev}, &(0x7f0000000140)=0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0xe000000, &(0x7f0000000180)=[{&(0x7f0000000000)="2e000000120081aee4520cecff0e00fa078b5bdb4cb904e473730e55cff26d1b0e001d80040000005e510befccd7", 0x2e}], 0x1}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x10, &(0x7f0000000300)={r6}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f00000000c0)={r6, 0xd0e}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=r6, &(0x7f0000000240)=0x4) sendto$inet(r1, &(0x7f0000000000)="4a4e5004cdd1ba97b13cf9bd72025818e276f75afc1763b98cc05ca7b883607e058bf22181b87d456b18709531b91ec30bd71e68f2d7774fb3f4a41cc5fe9fb96adb97605cfbb70be3ff5a", 0x4b, 0x800, 0x0, 0x0) [ 3084.002127][T20239] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 3084.112043][T20213] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3084.130827][T20199] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3084.170980][T20202] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3084.189121][T20239] netlink: 'syz-executor.4': attribute type 29 has an invalid length. 02:22:20 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0xfffffe3e) openat$cgroup_subtree(r0, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x10, 0x803, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0xe000000, &(0x7f0000000180)=[{&(0x7f0000000000)="2e000000120081aee4520cecff0e00fa078b5bdb4cb904e473730e55cff26d1b0e001d80040000005e510befccd7", 0x2e}], 0x1}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x10, &(0x7f0000000300)={r5}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f00000000c0)={r5, 0xd0e}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000340), &(0x7f0000000380)=0x4) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r5, 0xfe93, 0x4c1b}, &(0x7f0000000080)=0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@loopback, 0xfffc}, 0x6e6bb2}, [@migrate={0x50, 0x11, [{@in=@local, @in=@multicast2, @in, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}]}]}, 0xa0}}, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$sock_inet6_udp_SIOCOUTQ(r6, 0x5411, &(0x7f00000001c0)) [ 3084.224432][T20206] netlink: 'syz-executor.2': attribute type 9 has an invalid length. 02:22:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x7400}}}, 0x24}}, 0x0) [ 3084.399627][T20271] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 3084.427967][T20270] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3084.500110][T20271] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 3084.521980][T20276] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3084.540073][T20270] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:22:20 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a005a000200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) 02:22:20 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = accept$packet(r1, 0x0, &(0x7f00000000c0)) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r3, 0xf504, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r1, &(0x7f0000000140)={@val, @void, @eth={@link_local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4b549f", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}}, 0x4e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socket(0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) [ 3084.679164][T20295] netlink: 'syz-executor.2': attribute type 9 has an invalid length. 02:22:21 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) connect$netlink(0xffffffffffffffff, &(0x7f0000000000), 0xc) r1 = socket(0x10, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRESDEC, @ANYBLOB, @ANYBLOB, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="9e07ffa19c1ad5588d86730bcb7519613df0550282d271df62ff3b8e8d4c09f7b05b30e4b4170d2ce96216e067f091474c6e68fb1026c7d10a2c84907da254704d47c457a623167a2375eb5a965416195d0797b5d8b691e8de", @ANYRES32, @ANYRESHEX], 0xec}, 0x1, 0x0, 0x0, 0x1}, 0xc040) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xc, 0x2011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x2c, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x9}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x44080) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getpeername$l2tp6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4}, &(0x7f0000000100)=0x20) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r4, 0x0) [ 3084.887900][T20295] netlink: 'syz-executor.2': attribute type 9 has an invalid length. 02:22:22 executing program 1: getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000180), &(0x7f00000000c0)=0x68) unshare(0x40000000) setsockopt(0xffffffffffffffff, 0x43, 0x98b, 0x0, 0x0) socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000400)=@assoc_value, 0x8) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40}, 0x4000000) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="44000000020301032bbd7000fddbdf250301000001000700000000002436ba79ea68529ef92b64a2922038947a21deb6b100a73c71ce5dda2996fd82c6adda134fb2026da761b003491bded36df62549e726110903e7519121e19e5ca5000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x2004c080) splice(r2, 0x0, r0, 0x0, 0x400fffe, 0x0) 02:22:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x7a00}}}, 0x24}}, 0x0) 02:22:22 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0001240200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) 02:22:22 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) pwritev(r1, &(0x7f0000000500)=[{&(0x7f0000001340)='+', 0x1}], 0x1, 0x10000000000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={0x0}}, 0x6) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r1, 0x8982, &(0x7f00000000c0)) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 02:22:22 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') r3 = gettid() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000080)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, r5, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x50, r5, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x24008004) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000002", @ANYRES16=r2, @ANYBLOB="0b3e0000000000000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r3, @ANYBLOB="0d51b396672b9470982b"], 0x3c}, 0x1, 0x6000000000000000}, 0x0) 02:22:22 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000240)=@gcm_256={{0x303}, "e57493022e111edf", "51baaf8b320ebcaeaaf660f1180b2cca4f32412696097042b352ac4492c1d499", "f57decbc", "43e1e1b3e7249afd"}, 0x38) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000000c0)=0x211421, 0x4) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="002c6385dfbe619bf79c205f4c8943000180f2beaeca79caa05024ef0ba93bc200a4ff0000aaaaaaaa86dd604b619f0014060000000000000000000000000000000000fe800000000000000000006971cc7b365eeb7e3db75f9ad283a55263f4ecda62aaf923619681a44f26fc", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x4e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socket(0x0, 0x0, 0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) [ 3086.535422][T20347] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 3086.587248][T20357] IPVS: ftp: loaded support on port[0] = 21 [ 3086.786445][ T29] audit: type=1804 audit(1595470943.108:4805): pid=20362 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir464691444/syzkaller.RbUOvR/3361/cgroup.controllers" dev="sda1" ino=16376 res=1 [ 3086.972003][T20357] lo speed is unknown, defaulting to 1000 [ 3086.985278][T20347] netlink: 'syz-executor.2': attribute type 9 has an invalid length. 02:22:23 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0xa}, @NFTA_SET_DATA_LEN={0x8}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x4048010}, 0x0) sendfile(r1, r2, 0x0, 0xf03b0000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x2, 0xfffffe01, @empty, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e2c, 0x0, @ipv4={[], [], @local}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x3f00000000000000) sendfile(r3, r0, 0x0, 0x8000000000004) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=[@iv={0x0, 0x117, 0x2, 0x0, "15dc91768c78ba00960b7a5e4e7907526d7c7c8aee968a562b00cb905e1826a8f9ee0ac480576a7134801fc070041984c5c23fa0f93b59075853f70545ce9c61b15ff65cde5078b4209217f0220f0810f739bd470d405272edb16434a11869d08d8fef065de94710ee553b410c3c02a96c156836af8d11c4af4a77e766f9ed8ec43830fe02bb22babf9b41d4e5027b49ba3f720465bf4ee9b63892030f4fea97d94bc6cd1a7d4d6869cb3185e5da3ca0da"}, @op, @assoc, @assoc, @op, @op]}], 0x4924924924924b3, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000000), &(0x7f00000001c0)=0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 02:22:23 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r1, &(0x7f00000001c0)={@val, @val={0x1, 0x1, 0x9, 0x3f8, 0x1f, 0x2}, @eth={@link_local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4b549f", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}}, 0x58) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socket(0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 02:22:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x8100}}}, 0x24}}, 0x0) 02:22:23 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000004280)=[{{&(0x7f0000000580)={0xa, 0x4e24, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @remote, 0x700}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}], 0x28}}], 0x2, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=[@iv={0x0, 0x117, 0x2, 0x0, "15dc91768c78ba00960b7a5e4e7907526d7c7c8aee968a562b00cb905e1826a8f9ee0ac480576a7134801fc070041984c5c23fa0f93b59075853f70545ce9c61b15ff65cde5078b4209217f0220f0810f739bd470d405272edb16434a11869d08d8fef065de94710ee553b410c3c02a96c156836af8d11c4af4a77e766f9ed8ec43830fe02bb22babf9b41d4e5027b49ba3f720465bf4ee9b63892030f4fea97d94bc6cd1a7d4d6869cb3185e5da3ca0da"}, @op, @assoc, @assoc, @op, @op]}], 0x4924924924924b3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00000000c0), &(0x7f0000000100)=0x4) sendmsg$NFT_BATCH(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8}]}], {0x14}}, 0x7c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000005c0)={'wg2\x00', 0x0}) sendto$packet(r1, &(0x7f0000000040)="426f44619cfa89565d9b9a137b332563799eff12be67ba8ee07001070f90282332f884ed0f58b0ee7a7cf0311376806e2fe609511d231077c846879f053723c9dcab8662ba279189252e529825034f49d9cc6f2dbcee40d34be5215f1a3fb751a7f5a50e885e0050088b", 0x6a, 0x20000000, &(0x7f0000000600)={0x11, 0x2, r4, 0x1, 0x3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x5}}, 0x14) 02:22:23 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0000300200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) [ 3087.600869][T20357] lo speed is unknown, defaulting to 1000 [ 3087.632132][T20404] netlink: 'syz-executor.2': attribute type 9 has an invalid length. 02:22:24 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0001240200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) 02:22:26 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r3, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f00000016c0)=ANY=[@ANYBLOB="2a000200", @ANYRES16=0x0, @ANYBLOB="00002bbd7000fedbdf25100000000400028004000280040001800800040000000000"], 0x28}}, 0x4) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x4c000) socket$inet_sctp(0x2, 0x0, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 02:22:26 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="900000002c00270d00"/20, @ANYRES32=r3, @ANYBLOB="00000000000000000400000009000100666c6f7700000000600002005c000b805000028018000100000001000000000000000000000000000000ff0000050004000a000000080001000000000004000500050003008c0000000b000200706f6c696379000008000100c02f0000"], 0x90}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x4924924924926d3, 0x0) 02:22:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xf000}}}, 0x24}}, 0x0) 02:22:26 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8}]}], {0x14}}, 0x7c}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f00000000c0)={'veth1_virt_wifi\x00', {0x7, 0x0, @dev={0xac, 0x14, 0x14, 0x16}}}) write$tun(r1, &(0x7f0000000140)={@val, @void, @eth={@link_local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4b549f", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}}, 0x4e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socket(0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x4008040) r5 = openat$cgroup_ro(r0, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000440)) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000000) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 02:22:26 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0xb, 0x800, 0x8, 0x41, 0x1}, 0x40) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001180)={r0, &(0x7f0000000040), &(0x7f00000021c0)=""/4096}, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001080)={r0, &(0x7f0000000040), &(0x7f0000000080)=""/4096}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x2, 0x1, 0x3, 0x0, 0x0, {}, [@CTA_MARK={0x8}]}, 0x1c}}, 0x0) splice(r0, &(0x7f0000000040)=0x42, r1, &(0x7f00000010c0)=0x1, 0x7f, 0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_genetlink_get_family_id$l2tp(&(0x7f0000001200)='l2tp\x00') sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newlink={0x68, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x9}, @IFLA_GENEVE_ID={0x8, 0x1, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback={0x5}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x68}}, 0x20000040) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8}]}], {0x14}}, 0x7c}}, 0x0) ioctl$sock_SIOCDELRT(r5, 0x890c, &(0x7f0000001280)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e21, 0x2}}, @qipcrtr={0x2a, 0x4, 0x8000}, @vsock={0x28, 0x0, 0x0, @hyper}, 0x2, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001140)='vxcan1\x00', 0x9717, 0x3, 0x5}) r6 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000001240)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000011c0)={&(0x7f00000013c0)={0x58, 0x2, 0x3, 0x101, 0x0, 0x0, {0xc, 0x0, 0x1}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x12}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x3a}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x527, 0x2}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x7fffffff}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x11}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x4}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x20000094) 02:22:26 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0000360200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) [ 3089.985359][T20482] validate_nla: 2 callbacks suppressed [ 3089.985369][T20482] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 3089.998525][T20484] __nla_validate_parse: 12 callbacks suppressed [ 3089.998535][T20484] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3090.039192][ T29] audit: type=1804 audit(1595470946.358:4806): pid=20487 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir805535454/syzkaller.0DLSKc/4219/memory.events" dev="sda1" ino=16366 res=1 [ 3090.145381][ T29] audit: type=1800 audit(1595470946.358:4807): pid=20487 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16366 res=0 02:22:26 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r3, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f00000016c0)=ANY=[@ANYBLOB="2a000200", @ANYRES16=0x0, @ANYBLOB="00002bbd7000fedbdf25100000000400028004000280040001800800040000000000"], 0x28}}, 0x4) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x4c000) socket$inet_sctp(0x2, 0x0, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 3090.273498][ T29] audit: type=1804 audit(1595470946.358:4808): pid=20487 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir805535454/syzkaller.0DLSKc/4219/memory.events" dev="sda1" ino=16366 res=1 [ 3090.341279][ T29] audit: type=1804 audit(1595470946.518:4809): pid=20501 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir805535454/syzkaller.0DLSKc/4219/memory.events" dev="sda1" ino=16366 res=1 [ 3090.393602][ T29] audit: type=1804 audit(1595470946.578:4810): pid=20487 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir805535454/syzkaller.0DLSKc/4219/memory.events" dev="sda1" ino=16366 res=1 [ 3090.461524][ T29] audit: type=1800 audit(1595470946.578:4811): pid=20487 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16366 res=0 [ 3090.515027][ T29] audit: type=1804 audit(1595470946.778:4812): pid=20518 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir805535454/syzkaller.0DLSKc/4220/memory.events" dev="sda1" ino=16373 res=1 [ 3090.633249][ T29] audit: type=1800 audit(1595470946.778:4813): pid=20518 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16373 res=0 [ 3090.685647][T20490] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3090.733239][T20492] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3090.747920][ T29] audit: type=1804 audit(1595470946.788:4814): pid=20518 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir805535454/syzkaller.0DLSKc/4220/memory.events" dev="sda1" ino=16373 res=1 [ 3090.763107][T20492] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3090.821049][T20494] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:22:27 executing program 3: sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b2b34e9ff000099dbe547f4817059", 0x2c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000240), 0x4) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r3 = socket(0x0, 0x80000, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = socket(0x11, 0x800000003, 0x8) setsockopt$packet_buf(r4, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x31c) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendto$inet6(r4, &(0x7f0000000180)="ce0407008b3350ec00911efc0bb35c02630dffffa328b47ca8a88a37877b2b34e9ff000099dbe547f4817059", 0x2c, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x92b19, {0x0, 0x0, 0x0, 0x0, 0x269}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0) r6 = socket$pptp(0x18, 0x1, 0x2) write$binfmt_misc(r6, &(0x7f0000000480)={'syz1', "64af34d3c92ab24f38639c50012aed6eeb6392634ebfa76f5e6aa226de2d71effdf11be41d5c4e3490b00e164d6636e9ae89604f68ed2735dad6c39e98cff9417bf71b0a99f09cf7dd17bcafebd9758a745db291cee07394350d7968a11a3681168f8e49f8d906786fbada1e84ea644a616e1d694bd746a8e7181cee6d23529d8c0c15a2dbb613e6abff0a959b6654"}, 0x93) 02:22:27 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8}]}], {0x14}}, 0x7c}}, 0x0) r1 = accept(r0, 0x0, &(0x7f0000000140)) r2 = socket(0x10, 0x803, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0xe000000, &(0x7f0000000180)=[{&(0x7f0000000000)="2e000000120081aee4520cecff0e00fa078b5bdb4cb904e473730e55cff26d1b0e001d80040000005e510befccd7", 0x2e}], 0x1}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r2, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0xec, 0x0, 0x913, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x10, &(0x7f0000000300)={r5}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f00000000c0)={r5, 0xd0e}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000180)=r5, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000280)={0x2, [0x0, 0x0]}, &(0x7f00000002c0)=0xc) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000980)=ANY=[@ANYBLOB="b702000000008000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5eab7ff8a8cdc21ce784909b849d5550ad855dab54d8877a6db61d69f2ffcaa10350e11cb97c8adf1bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d1106fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8048a967d9b912ef9f1dcc4ff8546fee41f5b2e7b91c61ced1ebad000000000000e8122a79c3e40000b59b0fc46decec3c080a882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d4524847d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c01840219829472ad00000000000000171b98eabdca89b77efd13e6dba4a431ce47911834118093b6e1785e9abb835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000009bf38ce654e9cc0615c90f1a715d4a7d969261c576c3487f5d4d55824902b421f725dd56da18cfc01a6b805982b6f30edd65ee9a7412d6b383159dfa2ea504256c09f79ebae873438f0513ec5115b192192fc4102b9d71f30e2cd3e6907240b91e454e1dc1fb2fbc24fb2f3f7d7ba97bef8990600c998f24823b7e90c5c0236e222b7ee34abd51c1191c8c51200533022c1c6693519182c649514b199ed7100c6a9778566e0105cddb6579f4745150ad80d3939b5fccc6072e84ae63a600b194890931859db4903fda334855b99437714f7dfcf37ac3f446ac61b0568f6e2d9b9f882e290b5a07b6f0751bc8400432e8ed2e5a5789f1320ae4a6a026e1bf6411e4ab2b0466243015717ca7bc8ab561fc9aa4a1e9829a353c50d963935c871571c953c6b8e63fc3235137e7a014d2a3d06a74b43a561b4efda4f2ebbaa7ea4a35c78509186aef944d068db320fc7d144c6f52aeabbe19511304ad67e7d9c9d6725fc73c6c55a0af45158da3b2e3d30bbf12c62d5f04443a59d06235cccd1ed5d8d4eb7eace51444523e77c6c76d6572bd9fc34c190fdac972741eae4e6510bc021818e8a979b43afd1bc0b3fcaec82e4085796282ab98af30e0a82a13939f138c62e8f6da1019ddac8c59c04115097ec763bbea60e2ac1dc2078ab8490e8ee8f2573c524ed5e75840354227b8c48d7944823757a0442de0b1669b2f6c3b25dcea4ce2856773f2fa0c358c4ea42bd086d0d872ac48db56ee2a5b218b3ca8559832b9fb55a139c5004566253e600372bc500ea67ffd4ea9889bc8b3b2d69f509d56302e2106ab806a75cba2d8334c27afbe3971ca66936313e46a14cb4bb1b22283387983e9d030c7f5330d116ff8793d6cef76e7b290f249d6bc7302f11a10bd8a663d847060495a52f79acbef254df8cab3afb2a9125a2d2a67ce1bf904e6ee7f7ca1524f07ff2f2abb9b80e4cb0c093c5c59ede07a2cb6503095d1a0da37842b5699b106da5f4c6eb9dd"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000040)=r7, 0x4) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="2e0000001f000511d25a80648c63940d0700000010000640090003000200000037153e370a00088002141779ecbd", 0x2e}], 0x1}, 0x0) [ 3090.866387][T20498] device geneve3 entered promiscuous mode [ 3090.980972][T20541] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 3091.119402][T20548] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 3091.139109][T20548] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 02:22:27 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=[@iv={0x0, 0x117, 0x2, 0x0, "15dc91768c78ba00960b7a5e4e7907526d7c7c8aee968a562b00cb905e1826a8f9ee0ac480576a7134801fc070041984c5c23fa0f93b59075853f70545ce9c61b15ff65cde5078b4209217f0220f0810f739bd470d405272edb16434a11869d08d8fef065de94710ee553b410c3c02a96c156836af8d11c4af4a77e766f9ed8ec43830fe02bb22babf9b41d4e5027b49ba3f720465bf4ee9b63892030f4fea97d94bc6cd1a7d4d6869cb3185e5da3ca0da"}, @op, @assoc, @assoc, @op, @op]}], 0x4924924924924b3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f00000000c0)={r4, 0x7f, 0x1, 0xf1cf}) write$tun(r6, &(0x7f0000000140)={@val, @void, @eth={@link_local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4b549f", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}}, 0x4e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socket(0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x18100, 0x0) [ 3091.259124][T20502] device geneve3 entered promiscuous mode [ 3091.265377][T20528] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 3091.274264][T20490] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 02:22:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff}}}, 0x24}}, 0x0) [ 3091.341770][T20531] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3091.353110][T20541] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 3091.655364][T20546] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 3091.715484][T20541] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 3091.724350][T20541] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 3091.763825][T20567] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3091.827484][T20570] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3091.844932][T20573] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3091.869915][T20546] netlink: 'syz-executor.1': attribute type 29 has an invalid length. 02:22:28 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0000660200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) 02:22:28 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0xb, 0x800, 0x8, 0x41, 0x1}, 0x40) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001180)={r0, &(0x7f0000000040), &(0x7f00000021c0)=""/4096}, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001080)={r0, &(0x7f0000000040), &(0x7f0000000080)=""/4096}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x2, 0x1, 0x3, 0x0, 0x0, {}, [@CTA_MARK={0x8}]}, 0x1c}}, 0x0) splice(r0, &(0x7f0000000040)=0x42, r1, &(0x7f00000010c0)=0x1, 0x7f, 0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_genetlink_get_family_id$l2tp(&(0x7f0000001200)='l2tp\x00') sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newlink={0x68, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x9}, @IFLA_GENEVE_ID={0x8, 0x1, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback={0x5}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x68}}, 0x20000040) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8}]}], {0x14}}, 0x7c}}, 0x0) ioctl$sock_SIOCDELRT(r5, 0x890c, &(0x7f0000001280)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e21, 0x2}}, @qipcrtr={0x2a, 0x4, 0x8000}, @vsock={0x28, 0x0, 0x0, @hyper}, 0x2, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001140)='vxcan1\x00', 0x9717, 0x3, 0x5}) r6 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000001240)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000011c0)={&(0x7f00000013c0)={0x58, 0x2, 0x3, 0x101, 0x0, 0x0, {0xc, 0x0, 0x1}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x12}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x3a}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x527, 0x2}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x7fffffff}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x11}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x4}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x20000094) 02:22:28 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a01050000000000000000000000000400048009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r4, 0x10, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004040}, 0x40000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=@newtfilter={0x3c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@filter_kind_options=@f_flow={{0x9, 0x1, 'flow\x00'}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8}]}}]}, 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', r8}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', r9}) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x3e, 0x3, 0x1, 0x0, 0xf}, @NFTA_SET_GC_INTERVAL={0x0, 0xc, 0x1, 0x0, 0x7}]}], {0x14}}, 0x74}}, 0x0) 02:22:28 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000000000180c2000000aaaaaaaaaaaa86dd604b549f0014060000000000000000000000000000000000fe8000000000000000000000000000aa0000000007a2dc75efaccceb9e2f4c84c2d55a493166695557713dc341819c3f5acf20f08a0332e261816521518c6ad91757de424102447971902aed3f511aee760db7bc38e70576b083439f44952535e68c865479469edfe58c28ce817909ad5b59231e91a746c008d4b436e6c6c3a410295717d027421b214c99c7025d23358285bdf15e1a6e6089e247e9cf24f49fc1dfa9145e56f124431fa8b2b8bb2021957572636e6d618b5916f7699c295a19", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x4e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socket(0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 02:22:28 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, 0x4, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8}]}], {0x14}}, 0x7c}}, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000240)=0xffff, 0x4) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000000180), &(0x7f0000000040)=0x68) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000002) 02:22:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) 02:22:28 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000040)=0x80000008, 0x4) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f000006ffe4)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=[@iv={0x0, 0x117, 0x2, 0x0, "15dc91768c78ba00960b7a5e4e7907526d7c7c8aee968a562b00cb905e1826a8f9ee0ac480576a7134801fc070041984c5c23fa0f93b59075853f70545ce9c61b15ff65cde5078b4209217f0220f0810f739bd470d405272edb16434a11869d08d8fef065de94710ee553b410c3c02a96c156836af8d11c4af4a77e766f9ed8ec43830fe02bb22babf9b41d4e5027b49ba3f720465bf4ee9b63892030f4fea97d94bc6cd1a7d4d6869cb3185e5da3ca0da"}, @op, @assoc, @assoc, @op, @op]}], 0x4924924924924b3, 0x0) sendto$inet6(r1, &(0x7f0000000080)="c3a4ef2e084b9e9adfed696b94293bd312878d2625cf8fca7ebd250cdf63d7fc712af6fa0ba956753882cc53fc7f6ae60d7223d27963af4e9a7d06cbb757cc3e94f644d3518b9f79ceee22c68f4c204cda91a6307847577fe5c12b72b9f60f2934b6fb6c62d7a2c325dc44019c2d86c9df204d65dac2dd6b9942e8a417043cd535aae4c8ecff3c2694a9d620ebd2b9bc04e8dc52348df05c14c7b2f86a5a18fa873f415de419083c9538ea3a49cb2481c2aeff676f29", 0xb6, 0x40, &(0x7f0000000000)={0xa, 0x4e24, 0x6, @mcast2, 0x200}, 0x1c) 02:22:28 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a01050000000000000000000000000400048009000200dd387d00000000000900010073797a30000000000800034000000001140000001100df"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r4, 0x10, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004040}, 0x40000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=@newtfilter={0x3c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@filter_kind_options=@f_flow={{0x9, 0x1, 'flow\x00'}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8}]}}]}, 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', r8}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', r9}) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x3e, 0x3, 0x1, 0x0, 0xf}, @NFTA_SET_GC_INTERVAL={0x0, 0xc, 0x1, 0x0, 0x7}]}], {0x14}}, 0x74}}, 0x0) [ 3092.730832][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 3092.730846][ T29] audit: type=1804 audit(1595470949.058:4816): pid=20647 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir464691444/syzkaller.RbUOvR/3365/cgroup.controllers" dev="sda1" ino=16293 res=1 02:22:29 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003020200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) 02:22:29 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0000660200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) 02:22:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x2}}}, 0x24}}, 0x0) 02:22:29 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x13) write$binfmt_script(0xffffffffffffffff, 0x0, 0x6db6e559) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x3a, &(0x7f0000000380)=[{&(0x7f00000003c0)="339a", 0x2d05}], 0x1}, 0x350c) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 02:22:29 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8}]}], {0x14}}, 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8}]}], {0x14}}, 0x7c}}, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000080)=0x80) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0x1f8, r5, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK={0x20, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x178, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "ade72fff013dd2054ce9cb199a45a2af9b60b756922eaf"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x39, 0x3, "414ade07e7f245dd289eaf64d950a8ab9ad308c0352378d213e09cd092fe14fe012bf101658f92f7e9b837572ffc26d3426620d966"}, @TIPC_NLA_NODE_ID={0xe4, 0x3, "ee6ce289fb9cfc675c9ab430238936035f727215a097bbaca4b620be608816b90204b531a0055ead9cba64f71ba745b47daf9b6757741804623a81a100551645f2710a7d784ae9a70a01bc5e5231207a2c8a2cca61663b99282b9428d5c1f13aa457db56a563d8f442451e593300444546524db305df323b0e4a8de50fe865fdebed0474f4ba518745a4e54f316bb90e21b00d0a0d551720460a09e5b5a3e565220964d978d976aad0fb2d11f611e305bdfb82c29dbb3a3477cbfd61f358d91252352e008ad75edcdb86395de88ff0e6cef3b84b473caccd92d008c4b0eca874"}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x20040001}, 0x840) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x6c, r2, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @local, 0x2}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast1}}}}]}]}, 0x6c}}, 0x0) 02:22:29 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r1, &(0x7f0000000140)={@val, @void, @eth={@link_local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4b549f", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}}, 0x4e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socket(0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x23, 0x4, 0x3) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f00000000c0)={0x0, 'gre0\x00', {0x1}, 0x9}) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) bind$netlink(r5, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfc, 0x10000}, 0xc) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 02:22:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x3}}}, 0x24}}, 0x0) 02:22:30 executing program 1: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r3, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x6c, 0x3, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x81}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=ANY=[], 0x28}}, 0x0) [ 3094.193176][T20740] device bridge67 entered promiscuous mode [ 3094.236825][T20733] tipc: MTU too low for tipc bearer [ 3094.244086][T20737] tipc: Enabled bearer , priority 21 02:22:30 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003030200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) 02:22:30 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="3502020025000535d25a80648c2b940d0424fc606c00174002000000051a82c137153e6709020f8003001700d1bd", 0x2e}], 0x1}, 0x20000084) socket$inet6(0xa, 0x800, 0x3) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000005680)=[{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, &(0x7f0000003d80)=[@op={0x18}], 0x18}, {0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000003e40)="2bab9dbede3f1cf3cf70a7a8b219517e", 0x10}], 0x1}], 0x4, 0x0) r2 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000005680), 0x0, 0x60008850) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r2) shutdown(r1, 0x0) accept4(0xffffffffffffffff, &(0x7f00000000c0)=@rc={0x1f, @none}, &(0x7f0000000140)=0x80, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000180)='+', 0x1}], 0x1, 0x0) write$cgroup_int(r3, &(0x7f0000000440), 0x12) sendmsg$AUDIT_ADD_RULE(r3, &(0x7f0000000800)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000a100}, 0xc, &(0x7f0000000280)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"/1564], 0x4a4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000800) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0x9, @remote, 0x4}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x48, &(0x7f0000000340)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @mcast1}, @in6={0xa, 0x4e22, 0x8, @private2, 0xffff}]}, &(0x7f0000000180)=0x10) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) read$alg(0xffffffffffffffff, &(0x7f00000001c0)=""/11, 0xb) 02:22:30 executing program 3: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x40) close(r0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=[@iv={0x0, 0x117, 0x2, 0x0, "15dc91768c78ba00960b7a5e4e7907526d7c7c8aee968a562b00cb905e1826a8f9ee0ac480576a7134801fc070041984c5c23fa0f93b59075853f70545ce9c61b15ff65cde5078b4209217f0220f0810f739bd470d405272edb16434a11869d08d8fef065de94710ee553b410c3c02a96c156836af8d11c4af4a77e766f9ed8ec43830fe02bb22babf9b41d4e5027b49ba3f720465bf4ee9b63892030f4fea97d94bc6cd1a7d4d6869cb3185e5da3ca0da"}, @op, @assoc, @assoc, @op, @op]}], 0x4924924924924b3, 0x0) ioctl$SIOCAX25ADDFWD(r1, 0x89ea, &(0x7f0000000040)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null}) 02:22:30 executing program 3: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x40) close(r0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=[@iv={0x0, 0x117, 0x2, 0x0, "15dc91768c78ba00960b7a5e4e7907526d7c7c8aee968a562b00cb905e1826a8f9ee0ac480576a7134801fc070041984c5c23fa0f93b59075853f70545ce9c61b15ff65cde5078b4209217f0220f0810f739bd470d405272edb16434a11869d08d8fef065de94710ee553b410c3c02a96c156836af8d11c4af4a77e766f9ed8ec43830fe02bb22babf9b41d4e5027b49ba3f720465bf4ee9b63892030f4fea97d94bc6cd1a7d4d6869cb3185e5da3ca0da"}, @op, @assoc, @assoc, @op, @op]}], 0x4924924924924b3, 0x0) ioctl$SIOCAX25ADDFWD(r1, 0x89ea, &(0x7f0000000040)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null}) 02:22:31 executing program 1: r0 = socket$inet6(0x10, 0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, &(0x7f00000000c0)="bebe91012912fe42115cff78a4df4ac8509f8dfdee69ddbb7507c8c0bd861587a698f60be61ebc3a43b4b553ae3bc2894a8c47cdeba5bc10943821ddad12fe6750e386", 0x43) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) sendto$inet6(r0, &(0x7f00000001c0)="4c00000012001f15b9409b849ac00a00a5784003000000000000030038c88cc055c5ac27a6c5b068d0bf46d323456536005ad94a461cdbfee9bdb9423523598451d1ec0cffc8792cd8000000", 0x4c, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000000)={0x7}) 02:22:31 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r1, &(0x7f0000000140)={@val, @void, @eth={@link_local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4b549f", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}}, 0x4e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) connect$pptp(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x2, {0x1, @remote}}, 0x1e) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_netdev_private(r5, 0x89f9, &(0x7f00000000c0)) socket(0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 02:22:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 02:22:31 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = socket(0x10, 0x803, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000300)={r5}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={r5, 0xd0e}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000440)=r5, 0x4) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) setsockopt$rose(r2, 0x104, 0x4, &(0x7f0000000340)=0x1, 0x4) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="00001000000000000b0000000b0001006367726f7570000044000200400003803400028018000100001401000000000000000000ff030000000000001800020000000400000000000c0001000000000005000000080001001f"], 0x74}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x0, 0x4090) 02:22:31 executing program 1: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) r1 = socket(0x10, 0x803, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xe000000, &(0x7f0000000180)=[{&(0x7f0000000000)="2e000000120081aee4520cecff0e00fa078b5bdb4cb904e473730e55cff26d1b0e001d80040000005e510befccd7", 0x2e}], 0x1}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x10, &(0x7f0000000300)={r4}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000000c0)={r4, 0xd0e}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={r4, 0x80000001}, &(0x7f0000000280)=0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 02:22:31 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newtfilter={0x818, 0x12, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xf}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x7e8, 0x2, [@TCA_RSVP_POLICE={0x41c, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xc96, 0x2, 0x100, 0x1, 0xe6, 0x4, 0x1, 0xfffffffc, 0x1, 0x8, 0x1000, 0x80000001, 0x1, 0x3, 0x3f, 0xff, 0x6, 0x4, 0x0, 0x10001, 0x6, 0x8, 0x4, 0xaa3, 0x4, 0x5, 0x4, 0x3, 0x2, 0x10001, 0x7fffffff, 0x4, 0xee, 0x5dd, 0x2, 0x7fff, 0x5, 0x1c000, 0x4, 0x40, 0xbb, 0x1, 0x9, 0xef, 0xffff0001, 0xff, 0xfffffffc, 0x0, 0x2, 0xc2, 0x7, 0x2, 0x3, 0x2, 0x92, 0x69b, 0x7, 0xffffff01, 0x1, 0x80000000, 0x2, 0x976a, 0x3, 0x80, 0x8, 0x0, 0xcaf1, 0x7fffffff, 0x7, 0x400, 0x4, 0x8, 0x4, 0xf8, 0xffffff4b, 0x800, 0x3, 0x9, 0xfffffffa, 0x7, 0x1ff, 0xfffffad9, 0x9, 0x5, 0x8, 0x8001, 0x40, 0x7, 0x100, 0x40, 0x9, 0xc19, 0x3, 0x8, 0x8, 0x6, 0x3b, 0x5, 0x8, 0x8000, 0x2, 0xffffff7f, 0x960, 0x4, 0x5, 0x9, 0x9, 0x1, 0xd2fc, 0x9, 0x8, 0x9, 0x5, 0x9, 0x7, 0x80, 0x1, 0x10001, 0xcfd, 0xfffff82c, 0x8000, 0x2f6, 0x3ff, 0xf30, 0x4, 0x3, 0x5, 0x7, 0x7, 0x5, 0x3, 0x400, 0x5, 0x9, 0x7, 0x4, 0x8, 0x1, 0x6, 0x7, 0xfffffa01, 0x0, 0x5, 0x5, 0x4, 0x2, 0x4, 0x7ff, 0x7, 0xe6e1, 0x8001, 0x5e, 0x5, 0x9, 0x1f, 0x80000000, 0x1000000, 0x101, 0x3a, 0x6, 0x800, 0x5, 0x9, 0x1, 0x9, 0x8000, 0x8348, 0xdad, 0x4, 0x8, 0x9, 0xc1a1, 0x928a, 0x20, 0x1, 0x800, 0x3, 0x5, 0x8, 0x6, 0x2, 0x68c0, 0x7, 0x121, 0xeba, 0xd57, 0x20, 0x6, 0x6d2, 0x3389, 0x0, 0x3ff, 0x0, 0x10000, 0x200, 0x6, 0x757a, 0x8, 0x7, 0x9, 0x0, 0x3f, 0x81, 0x20, 0x0, 0x401, 0x200, 0x7, 0x5, 0x3, 0x4, 0x4, 0x5, 0x5, 0x1, 0x80000000, 0x4f, 0x6, 0x7, 0x3, 0x1, 0x2, 0x2, 0xffffffff, 0x5, 0x2, 0x6ce, 0x80000001, 0xfffffffb, 0x800, 0x7, 0x6, 0x8000, 0x8, 0x0, 0x5, 0x9, 0x4, 0x7, 0x7, 0xffffffff, 0x1, 0x8, 0x1, 0x8, 0xffffffff, 0x8, 0xffffffff, 0x9, 0xfffffeff, 0x40, 0x5, 0x3, 0x4abc, 0xa, 0x2]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}]}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x4, 0xfd, 0x3}, {0x2, 0xffffffff}, 0xff, 0x4, 0x80}}, @TCA_RSVP_ACT={0x3a0, 0x6, [@m_skbmod={0x114, 0x17, 0x0, 0x0, {{0xb, 0x1, 'skbmod\x00'}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x1}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}]}, {0xba, 0x6, "ac95068cac77a566aed895c64460f5eec44d2964e157c911ab53859d18390959f6034f17ec0da39684d334e7684e38f9118e52ddcef4d461b1136cae4a121c2b5df54e2a281c7946a93fd3cfc5cf154e1cf7758b219a8fbc08531ba553b8a1ce28275aa2e7f6b716946aaf6b138b9e1ddb5c153b73c6d5cf138da6e3ca933e3804a3cc3db254d80bcdf9ef5d4f1957ab1f3219d05fd0e5f7a22858088021e109d1edac2a3bf4fcd65b436c1f7557526b641589d637ff"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbmod={0x8c, 0x9, 0x0, 0x0, {{0xb, 0x1, 'skbmod\x00'}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @random="d0680600f78c"}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="b36ef924a591"}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="a57a15c1e7de"}]}, {0x15, 0x6, "579964195970cdfa2146fd11d34dabec12"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x104, 0x1e, 0x0, 0x0, {{0x8, 0x1, 'ife\x00'}, {0xac, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x4eae}, @TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x6f51, 0x2, 0x5, 0x6}, 0x1}}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x3, 0x2, 0x0, 0x9}}}, @TCA_IFE_METALST={0x30, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x6}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x5c}, @IFE_META_TCINDEX={0x0, 0x5, @val=0x3}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x8}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_DMAC={0xa, 0x3, @remote}, @TCA_IFE_SMAC={0xa, 0x4, @dev={[], 0x2b}}]}, {0x31, 0x6, "6b8f57e72adb006322e3cff4c33de766c5538068d934ed361130cfc0ec5587b9aac103f6a1020d634c276061bd"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ct={0xf8, 0xd, 0x0, 0x0, {{0xfffffffffffffee2, 0x1, 'ct\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e23}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @mcast1}]}, {0xb4, 0x6, "c45323df536fe76af19793a687aa1b497bb612e1cc7ee49c2d0fcb78fcbf620f2187027dcbd013756ca0f35328a94015c4d961132b4768440cc3a93befe6f849bbb567c15573fac719e532a9d49b29ef8f2cc50be34047d971b9d98e96a873b46b745089d416d95f5545b90217d54bd842ef50b53b70d27219eb87b58ac2f3457610e448281fef25cc5f4c835bad4ee37ee06d4255edd58652dbf0636838ab228d6bcb1a37734e16d7daedf682bbea34"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x6, 0xffff}}]}}]}, 0x818}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="5b8fdf8938f0d3ae5ba3c8d2db392a0027685460a46bfc38b6373cb4c4e251266323b9b70b1c2d981e03ba5f0534005e091d0c953ca6547e16ef71a545bfa9bd5093fe96fb0a6b7b69d2b01af03d2bb908f9bdbf3c8b914ba3ed822ab682f988fbded76808d5be8235b1a500000000000000723e9085e965af69e78f00"/152, @ANYRES16=r2, @ANYBLOB="f1b52639fcaa47fd1919002dbd0300fffffff7000000000800010000000000000028b825f7d524a7056c08fb7ffe3eda00"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=[@iv={0x0, 0x117, 0x2, 0x0, "15dc91768c78ba00960b7a5e4e7907526d7c7c8aee968a562b00cb905e1826a8f9ee0ac480576a7134801fc070041984c5c23fa0f93b59075853f70545ce9c61b15ff65cde5078b4209217f0220f0810f739bd470d405272edb16434a11869d08d8fef065de94710ee553b410c3c02a96c156836af8d11c4af4a77e766f9ed8ec43830fe02bb22babf9b41d4e5027b49ba3f720465bf4ee9b63892030f4fea97d94bc6cd1a7d4d6869cb3185e5da3ca0da"}, @op, @assoc, @assoc, @op, @op]}], 0x4924924924924b3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r7, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=ANY=[@ANYBLOB="000000000000000017010000020000000000000015dc91768c78ba00960b7a5e4e7907526d7c7c8aee968a562b00cb905e1826a8f9ee0ac480576a7134801fc070041984c5c260a0f93b59075853f70545ce9c61b15ff65cde5078b4209217f0220f0810f739bd470d405272edb16434a11869d08d2900065de94710ee553b410c3c02a96c156836af8d11c4af4a77e766f9ed8ec43830fe02bb22babf9b41d4e5027b49ba3f720465bf4ee9b63892030f4fea97d94bc6cd1a7d4d6869cb3185e5da3ca0da000000000000000000000017010000030000000000000000000000000000000000616bdb696ed1f97e00000000c4818611000000000000000000000000000000000000170100000300000000000000000000000000000000000000170100000300"/304]}], 0x4924924924924b3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8}]}], {0x14}}, 0x7c}}, 0x0) r9 = accept(r8, &(0x7f0000000140)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev}}, &(0x7f00000001c0)=0x80) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="88000000", @ANYRES16=r2, @ANYBLOB="20002cbd7000fddbdf25010000002400078008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="c22ebe2bf8e484fb2c080001f63524f618b5766e0eeaa9543770c3d2619b2181080000005f5202ff07cd28652aa446684047188318099165d36a8d4291bca4c46d937d2c3af6c65a541bf5d2362ab6339223caf774e314748f56d115c0a12000b6f06daaed8d80cea11fb0fb4ef81e9b26e506728a34cd83e43af57ba7d560", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES16, @ANYBLOB="0c00030003000000000000001400078008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="3000000000000000000000000c00030000000000000000000c000200010000000000001deb9e08dc9a4ab78b9307ec3e"], 0x88}, 0x1, 0x0, 0x0, 0x895}, 0x4080) [ 3095.183282][T20795] __nla_validate_parse: 25 callbacks suppressed [ 3095.183292][T20795] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3095.191522][T20811] validate_nla: 7 callbacks suppressed [ 3095.191531][T20811] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 3095.262391][T20797] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3095.312552][T20798] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3095.326930][T20802] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3095.370073][T20806] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 3095.380441][ T9948] tipc: 32-bit node address hash set to fbff1eac 02:22:31 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003040200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) [ 3095.447163][T20806] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3095.486576][T20806] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3095.560453][T20835] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 3095.568797][T20806] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3095.696726][T20811] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 3095.711703][T20801] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 02:22:32 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000002380)={0x9, 0x6, 0xffff8000}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r1, &(0x7f0000002480)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002440)={&(0x7f0000002400)={0x14, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x800) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000002580)={0xffffffffffffffff}) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000026c0)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002680)={&(0x7f0000002600)={0x5c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2f}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x40840) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000004d00)=@req={0x6, 0xffff, 0x8, 0x1}, 0x10) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000004d40)={0x0, 0x8f, 0x4, [0x5, 0x8, 0x60, 0x3ff]}, &(0x7f0000004d80)=0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000004dc0)={r5, @in6={{0xa, 0x4e24, 0x2, @empty, 0x9}}, 0x7fff, 0x40, 0x0, 0x2, 0x2a, 0x10001}, 0x9c) socketpair(0x2a, 0x800, 0x80000000, &(0x7f0000004e80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000004fc0)={&(0x7f0000004ec0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000004f80)={&(0x7f0000004f00)={0x50, 0x2, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x5}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x8880}, 0x8000) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000005040)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000005100)={&(0x7f0000005000), 0xc, &(0x7f00000050c0)={&(0x7f0000005080)={0x30, r7, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x30}}, 0x4000001) bind$bt_l2cap(r6, &(0x7f0000005140)={0x1f, 0x4, @any, 0x39}, 0xe) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000005180)='/dev/net/tun\x00', 0x800, 0x0) r9 = getgid() ioctl$TUNSETGROUP(r8, 0x400454ce, r9) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f00000061c0)={&(0x7f00000060c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000006180)={&(0x7f0000006140)={0x3c, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x28, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x73627116}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x318ca742}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x200}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7404ffab}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8010) [ 3095.780912][T20848] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 3095.930196][T20798] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3095.969996][T20848] netlink: 'syz-executor.1': attribute type 29 has an invalid length. 02:22:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@bridge_getneigh={0x34, 0x12, 0x301, 0x0, 0x0, {0x10}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_to_hsr\x00'}]}, 0x34}}, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={0x0, @sco, @ethernet={0x306, @local}, @l2={0x1f, 0xe4, @fixed={[], 0x10}, 0x7f, 0x1}, 0x6, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000100)='batadv0\x00', 0x1400, 0x100, 0xa1}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14}}, 0x60}}, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) 02:22:32 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8}]}], {0x14}}, 0x7c}}, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r4, 0x8008f512, &(0x7f00000000c0)) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$binfmt_misc(r1, &(0x7f00000001c0)={'syz0', "460e958b5da15c0122ee520295f8bc5b14f2c77dc44cf652c4ee44b25a773252ae18a7eca229c1c1f0f785e98e7a009fce89b4480d8697623d40b83fb2da34a4fac032cd7b0742929f8654cc8bb0851763c55cdc6755c4f5df081244ef2d270dc8caa675a4865821598bc17d13ee708a65d082b9d0fb33030e0c5d5045b567072ee17995923f2d69ba9452dffff660f7b739cf47a76ca67ee125f41bcc208edc47b102c39f51453bb53922205062c0519dcae8abdd8f488c17142c76ea9502b0bfc58fb06c94e8ea539919d2f26cb752cc07"}, 0xd6) write$tun(r1, &(0x7f0000000140)={@val, @void, @eth={@link_local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4b549f", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}}, 0x4e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socket(0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) [ 3095.978464][T20802] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3096.067573][T20849] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 3096.131471][T20849] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3096.162281][T20849] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3096.214290][T20849] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready 02:22:32 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) getsockopt$packet_buf(r0, 0x111, 0x0, 0x0, 0xfffffffffffffffd) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=[@iv={0x0, 0x117, 0x2, 0x0, "15dc91768c78ba00960b7a5e4e7907526d7c7c8aee968a562b00cb905e1826a8f9ee0ac480576a7134801fc070041984c5c23fa0f93b59075853f70545ce9c61b15ff65cde5078b4209217f0220f0810f739bd470d405272edb16434a11869d08d8fef065de94710ee553b410c3c02a96c156836af8d11c4af4a77e766f9ed8ec43830fe02bb22babf9b41d4e5027b49ba3f720465bf4ee9b63892030f4fea97d94bc6cd1a7d4d6869cb3185e5da3ca0da"}, @op, @assoc, @assoc, @op, @op]}], 0x4924924924924b3, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000000)=0x8000000, 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000001840)=0x3, 0x4) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000040)=""/16, &(0x7f0000000080)=0x10) getsockopt$inet_dccp_buf(r1, 0x21, 0x0, &(0x7f00000000c0)=""/159, &(0x7f0000000180)=0x9f) sendmmsg$alg(r1, &(0x7f0000001c80)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="00049da8cb5ea7e55229155ea3277b6e683a85520f20f8418586ad6ecc562d44a2ec1be4af0000d01ea4f17d42f8ecf097941010db5be01779e6fd44ba916f483f69c3b34c32442a310f35f3076120a32d21bc6bd7b1889732170b1113a0796309584acd52c2939025d46db0c44e7b6c9acb81393464930407988404047bc2cbb7dcda44c861830ae36e962cdaf4f9874927149b25ed6d2e70c9cda4c65c71526f9bd6c2533a1c3ee6d629bcc9e899", 0xaf}, {&(0x7f0000000700)="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", 0x1000}, {0xfffffffffffffffe}, {&(0x7f0000000300)="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", 0xfa}], 0x4, &(0x7f0000000400), 0x0, 0x4004080}, {0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000440)="a6dca369e350fc35448ded63b621dd", 0xf}, {&(0x7f0000000480)="0fc9a9a3820aeb687358a869be4d9e9a9f968cde0a7c99050da8806e24fed3e16cb790b2c924a4d28f5fc603099b48ad66949414d8d5c6c596dea0076aa3b9d7a9e27e86b29bb544b9bb9f1ac20b0f3a9d379ad8be7f4a2e04bec8d00adb8a63c51dd7089e7941a836136405536b69cbab5fe19d40da864ad800fa7c", 0x7c}, {&(0x7f0000000500)="f14f69e9de23281b49b0b76d1ec3f2d41e8c958a33268b72d0d1", 0x1a}, {&(0x7f0000000540)="556348d72c9f984e4ee08f0fe18642098ce89aa5f4735d3c35359d143de7b54b934ce849eb166e6695f3a7657023e54ca5354671a39341a665f68e9c7f6ce41722da276a9f4356cec11223baef3d6b4a0ba15715a7522af67f28dded3f78a419f4cb612fe6b6efe956b06133feee058ba7a4d82fa59e", 0x76}, {&(0x7f0000001700)="9e47f270f115c7ee85d281043d30efb13a20d2c460dde62544c121b07ed1cf151aea5157240f69319f96fd2703a000ff65069810426943f16fce2a24751b685f53e4f562d4b6dcb4bdb7fac716c91dd9c92b4bd657c8658456d11a4cac853451277c7c9e257a15e304aeb6e7367ae2e854d05c0f28aa3d3cce2b8587217ad0d9490a6db64945095d5d54dd5612faf9d6c27cf96679235dcc9e8171e1", 0x9c}], 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], 0x88, 0x4000000}, {0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000001900)="72fffb421888bfade88035de243b94c91b79d77b39660a539d3644f3f3fbc763469cc8ebdef3ce189d724abc574d0a3e742a5357579153f4d39a72cf38f457c6ed6457383dd2dc5e4e59f5fa0cdc652983b12cb1154a7b4b52b8ae19663ab03015e1f6a6d56706a82c6b8f8ec428556407156d98f215f1eab87821f181b82f492d395701478eb8d9ea4a81b1ab615b80e90ec4a5a3ec06dbca4998a0fe436ac7cac6f62be086f98596a50b55e63e347e942567e2cb98a618277881c8cb4cb0fbd47c1799df78074411d0a6463573fd4e", 0xd0}], 0x1, &(0x7f0000001a40)=[@iv={0x118, 0x117, 0x2, 0xfe, "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"}, @assoc={0x18, 0x117, 0x4, 0x5}, @iv={0x108, 0x117, 0x2, 0xf3, "3cb009a0a94b3a9d0bfc88b58b0c73f3cb7d8a8351f60e3a5af757832b53c617f1f9268e53aabdedd0a53480669eee764618a46ebcbdff56ebffde20753214f45cb5ef49e61cdee2f926ebcac97407c24a47c611e2c04da99e37a2f4dd6e77caee662349f54f09144a41bd5633335074ad0322d6273f64d6aeeccf70258c8f87c8b969443de7743d01a7698c2ca9486883e6fb0648329e8190e36c89b28facb142f10dea8fea708e15996320e0523ca8d2fbd7545d6b1d24f9b2fdb3a93651dc611f9f6ef925bd48432a526246200cd4dab5fa5f228f9ed2c60825b9a17338812f60570289fa3fc7e3baa92d34ed6e74a16093"}], 0x238, 0x1}], 0x3, 0x4) r2 = socket(0x10, 0x80002, 0x0) r3 = socket(0x26, 0x5, 0x44be) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000001d40)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x44}}], 0x10) sendmmsg$alg(r2, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=[@iv={0x0, 0x117, 0x2, 0x0, "15dc91768c78ba00960b7a5e4e7907526d7c7c8aee968a562b00cb905e1826a8f9ee0ac480576a7134801fc070041984c5c23fa0f93b59075853f70545ce9c61b15ff65cde5078b4209217f0220f0810f739bd470d405272edb16434a11869d08d8fef065de94710ee553b410c3c02a96c156836af8d11c4af4a77e766f9ed8ec43830fe02bb22babf9b41d4e5027b49ba3f720465bf4ee9b63892030f4fea97d94bc6cd1a7d4d6869cb3185e5da3ca0da"}, @op, @assoc, @assoc, @op, @op]}], 0x4924924924924b3, 0x0) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000400)=@req={0x1, 0x9, 0x10000, 0x5}, 0x10) 02:22:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x5}}}, 0x24}}, 0x0) [ 3096.283363][T20835] netlink: 'syz-executor.2': attribute type 9 has an invalid length. 02:22:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000003c0)={0x2c, r1, 0x1, 0x0, 0x0, {0x12}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x2c}}, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000001100)=0x6) listen(r2, 0x0) accept4$rose(r2, 0x0, 0x0, 0x0) ioctl$SIOCRSGL2CALL(r2, 0x89e5, &(0x7f0000000000)) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)=""/255, &(0x7f0000000140)=0xff) [ 3096.602495][T20880] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3096.690655][T20885] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3096.712376][T20888] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:22:33 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003050200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) 02:22:33 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x2) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='nv\x00', 0x3) sendto$rxrpc(r0, &(0x7f00000002c0)="557d2787149e04d5c0426a5d6aa5918c7160908512b50ab277f69b3972c6b7516c6c3bb5aa835def9323763cba19914ad092b080226d99c981edbb75660a0cc5f9cdf15933e69c6b1c62b41b6c10dffed9b8007095a0cb9a86b42f18d974aa696e9f034692ed51262873660e872846cbfdcd6bb5aee09f6bcc49cb4b9314", 0x7e, 0x24004810, 0x0, 0x0) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfffffecc) pipe(0x0) socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, 0x0, 0x811) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYRES32], 0x100000530) 02:22:33 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb130600000000000000001c0000001c00000003000000010000000000000504000000002e00"/54], &(0x7f00000003c0)=""/237, 0x37, 0xed, 0x1}, 0x20) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x3, &(0x7f0000008000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0x10, 0xffffffffffffffff}, 0x78) 02:22:33 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x2) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r1, &(0x7f0000000140)={@val, @void, @eth={@link_local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4b549f", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}}, 0x4e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socket(0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) [ 3096.948684][T20913] netlink: 'syz-executor.2': attribute type 9 has an invalid length. 02:22:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x6}}}, 0x24}}, 0x0) 02:22:33 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x20008001, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0xac14140d}, 0x10) getpeername(r0, &(0x7f0000000900)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, &(0x7f0000000980)=0x80) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x40002000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="ab553fec94248c32e27d04000000288a", 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xd86dac9, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x48}}, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000080)) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0x3, @default}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) sendfile(r2, r1, 0x0, 0x8000000000004) recvfrom(r3, &(0x7f0000000100)=""/94, 0x6adcb3def6f8f87f, 0x10100, 0x0, 0x0) 02:22:33 executing program 4: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400007e280000005e00ff03c81f8374b4c125a4ffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x400000e, 0x0, 0x0, 0x0, 0x4000000000000}}], 0x300, 0x42, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8}]}], {0x14}}, 0x7c}}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000003600)={0x2, 'veth1_to_bond\x00', {0x4}, 0x200}) recvmsg(r1, &(0x7f0000000180)={&(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000002400)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000002240)=""/252, 0xfc}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000140)=""/7, 0x7}, {&(0x7f0000002340)=""/157, 0x9d}], 0x7, &(0x7f0000002480)=""/187, 0xbb}, 0x10040) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0xd0e}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000005200)={0x800, 0x5, 0x2, 0xffffffe1, 0x8000, 0x39c1, 0x4, 0x3, 0x0}, &(0x7f0000005240)=0x20) r4 = socket(0x10, 0x803, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0xe000000, &(0x7f0000000180)=[{&(0x7f0000000000)="2e000000120081aee4520cecff0e00fa078b5bdb4cb904e473730e55cff26d1b0e001d80040000005e510befccd7", 0x2e}], 0x1}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x10, &(0x7f0000000300)={r7}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f00000000c0)={r7, 0xd0e}, &(0x7f0000000100)=0x8) sendmmsg$inet_sctp(r0, &(0x7f00000056c0)=[{&(0x7f0000003640)=@in={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000003c00)=[{&(0x7f0000003680)="025fb77132ee3284a35fbcf77fe79e96aacbd2f8b2888896d78ab533c2c851b3a36fb6ac7cdc17c3d04c0e08706e356effeece3d5aa7ee", 0x37}, {&(0x7f00000036c0)="6c1534397a91ebc88163db4a3e34313a9ee79834f92b6ca4d7950f03e9a094d3aa78671ca3b4f2078cd431b7f4b3a0833c56dec0c9d5124c283ceebcf234097d18938c3e7af1c4a1732d541e918de24cb1cea24b8e47e0d4330b4db4b57d35bdd407d7715fbe616b18213817bbfeda762b617471912fbdc3a0be4564cb14aafedf10418b48fdc688fbb1db3efa2790c35812fa444da85c764c67bd953c555ada90f9bd026b16f0f923b827925b5ad1", 0xaf}, {&(0x7f0000003780)="8ef3954df1c0502d62a0523fc99930d4cb4560054cac89961070b89236091dd0cbf399d68bcf1037e2075cf26dedbcb3e3ea1f837512fb4cc62fee540b4382edb3fc42f8ebee393d297be2ea56047a180939a68493714e1e5c989b8887f7", 0x5e}, {&(0x7f0000003800)="0dccab5f49dca31226aae64a62a1d9d4daaf7061e33080b585bdb421e30fba57c7f657a189e56bbbd22a508bad7ff2b67701c43b016f4892c2f00ef797f6e918fbcec7ced723673da5ce8946d7fad8fc9598e8a6e8aece5c8c9e820afb168c35352c5f5d525c9b872fa495c34d3538fe09e893527f066f62f88341ce69534bc05c17837f48c5e941caf590237ef57bc8ee8a13357eb8450361a80ac5dcb8272e95d77fb8c3528fdca210fe8ceacf48ddfcb8d88ba22d99dc9bcbf56e1269c470e8244f498769ff9ebb6d42315516f0d7210937cf1817cc4fce1ab3d698b80406e41c63bbee6e3c2a21e7f76d6a29d0a8187e", 0xf2}, {&(0x7f0000003900)="5dcc3bb364727f5761e12d30a9aaf4ebfa045745df88b7f15aa2ec8044ce0b17bb0f9244ab4e45065a21c17271593b34dbe2093e1b953fd717d183a97b9ac658366247d395fb9d99b5f060ebe500b20a3fc9ef81eaa3bd64ac2b22928db98f4f3bfeb17cd900c4e4bf920df5c1048c7d7dbed2452c3255b4747ea9d8ea1f67ea268e527ce34418ffa413f8c8defbdf7abcf42c542c8dbee6fde0893b4ddc24f3751908d357d7ddd44d98c75736", 0xad}, {&(0x7f00000039c0)="8905f9b9deddc799e48f988d5438ead1e58ba797a0ea75b74b44b96f2b759c2b6172fea8b076f44e22aa4fb9e5ead84539453d99e2fd058a67103424c966ad1c80d4618b24748e6791760671fa0d5cdfa795ce857bb9351dc8b8c33d666f4970dbc06d8ef32d0caf2b", 0x69}, {&(0x7f0000003a40)="36f5577d810a7410d71592d4c126968656d09e1b4e9e17ef37183b01ba3d0ce0f6e66c3680a211f79327d9c1c5cbcec5a26788ff965fdd29bdebff17b2bf2a0670797201289b628a09729b16549f38ef3eed036cf34d255c62246365be936dbd6522e7bdfe33438ffa4e16656ecc469f2f8ca94d55e2607dcd6ef198f25a8afa8c19fc4ec34eb71c632324b5cf", 0x8d}, {&(0x7f0000003b00)="021cb3485ab3bed65d9eafd8ad492e6040dc529637e592973be8d9de261ac5c5edb28a466c6dbb4b2d6438aaef4a4da1027df5a29bc36a81e97fe0479ae307673c65329d2f7b0f3229067cfa0630ffbf38ffe46661843509", 0x58}, {&(0x7f0000003b80)="468fbf0bddf0b3d1af6f8338de8407a30465a6b47b16f111760ab75c3883623f75739c154add807dc07c20c5e152096aa8c59847a0be25e9b5e79d6d31a30db0f306c0212844b1d5da73aac3f9ef009102", 0x51}], 0x9, &(0x7f0000003f00)=[@sndinfo={0x20, 0x84, 0x2, {0x9, 0x2, 0x3, 0x8}}, @authinfo={0x18}, @sndrcv={0x30, 0x84, 0x1, {0x9, 0x29, 0x6, 0xdba, 0xd6, 0x8, 0x7fff, 0xffffffff}}, @authinfo={0x18}, @authinfo={0x18, 0x84, 0x6, {0x401}}, @sndrcv={0x30, 0x84, 0x1, {0x9, 0x5, 0x103, 0x1, 0x3, 0xe, 0x4, 0xff}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x8001}}], 0xe0, 0x8040}, {&(0x7f0000004000)=@in6={0xa, 0x4e23, 0x9ff, @empty, 0x1}, 0x1c, &(0x7f00000051c0)=[{&(0x7f0000004040)="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", 0x1000}, {&(0x7f0000005040)="a8b80587a499015f59cf51c1cd416aa94d48d3d8860967b37c227f49d083205974f647de2e3d24ab74faeb33b3bdb5ef8a21f3d00fee156bf2e45ae531171d5f2af9c441d04f6e6b8719646fe8193a4fc0200aa9461c2b6b42cdf90e99862f15250f3cc6282451aa72f8711f2611e6fea04cf96d40d0b670709e771246b2111292ba317a2c92a119a644cacddcf6a9d7803cdfac3a63e5b172873217e7f446f9055a93198ef4ee6cc2600503e7d4de6bee", 0xb1}, {&(0x7f0000005100)="5fbcf36f76b0408125a2d2f69f8f5cc53f395b374156350ac4fa7f5db5a36ef1f4b50609a15c8f597b6d8c3d7f060738e69dead6fe20e55272d1ac60d3fdfa51439128ed308e3a05585dc2a5c2f7ceb082971211e1fb4329b1f390194f697bfc073997b38f5aff66c80b0531381b4d823e8c3c508b9979476fc09e9f42f0517d8f958447014a560ffbff833bfd7f40694c20e21e6b47dd589f55a3df26b87070d1ec9a0599a97e5099d8140ceb", 0xad}], 0x3, &(0x7f0000005280)=[@sndrcv={0x30, 0x84, 0x1, {0x2, 0xd8d, 0x2, 0x3f, 0x7fff, 0x4, 0x1, 0xec3, r3}}, @dstaddrv4={0x18, 0x84, 0x7, @broadcast}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x7}}, @authinfo={0x18, 0x84, 0x6, {0x1}}, @authinfo={0x18, 0x84, 0x6, {0x8}}], 0x90, 0x80}, {&(0x7f0000005340)=@in6={0xa, 0x4e21, 0x9, @empty, 0x8}, 0x1c, &(0x7f0000005600)=[{&(0x7f0000005380)="4a9d34b637010fec00c911d5058d8b9b89c8156142c94b8beda312de5975e4546d466d22f5761d3be0f85ad768f1db507f5751d760bf62806a588f821362296367caac5a2213b4b1cf", 0x49}, {&(0x7f0000005400)="82cad70fefe25a2f107b00333cc6cc6fb7f49179da2dd6c180fea4306bed18fd12d0644a98794e3118ac3fb98887c3577bb15ff595d0f1570076d5f20a111d52985604818c581f8cc96451f2c24a103bb227dbc3e34eef44b82741", 0x5b}, {&(0x7f0000005480)="06ffa4914b1a71f057375e39f910e1a5c27898077848f08821317494ad5c53b337bbadcd6763466a601096c3c24bf702806630fb7b7baabe530ac617f8b6da73d06e4d457a4b190d53e57633bf5163216b5ee68def73ced675f68698621008b92b522ef869b56eec65e6169ce8d37012608cf5df7219828e", 0x78}, {&(0x7f0000005500)="128440920f3dd1c5f076f19d7668bfd26bbd70a4b205014c6c8769f7122d0dfff510a4feb5b06f84b061534f4a298d2546822d88e85799485e619e824bffb172fd66f12764a9223b1c7e0f463342298bb79e600793a74a24ed77b13ede264608d62579c4c5aa453a736a02b0cf915adc778d5cf5ce72e17fc1e534e37363923e28fc73f997ab259ced5540fed77908910d225c6a7ea7bf2344ddb1057febda555252a9c5fbfacd30187809cf467353e49813597483b0eb110353becaa214a57b27b49be67f743d027ece64dd83de004658d7773dac93cf3a8adf331b9236480d5dd110adcf796dcf560fa3", 0xeb}], 0x4, &(0x7f0000005640)=[@authinfo={0x18, 0x84, 0x6, {0x6}}, @sndrcv={0x30, 0x84, 0x1, {0xffad, 0x800, 0x2, 0x400, 0x100, 0xff, 0x10001, 0xfffffd7c, r7}}], 0x48}], 0x3, 0x48000) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000003580), &(0x7f00000035c0)=0x4) [ 3097.422523][T20944] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 3097.511385][T20944] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 3097.533134][T20958] netlink: 'syz-executor.2': attribute type 9 has an invalid length. 02:22:34 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x189002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000100)=0x80) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={0xffffffffffffffff}}, 0x841) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r5 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6, 0xfdc}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0xfffffffc, 0x10}, 0xc) r6 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6, 0xfdc}}, 0xe8) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r7, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r8 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x2c}, {}, 0x0, 0x0, 0x1, 0x1}, {{@in=@rand_addr=0x7fffffff, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x3, 0x0, 0x6, 0xfdc}}, 0xe8) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYBLOB, @ANYBLOB="60000000003f87fae252b1f4ef335a31acbdc04fb83dd6dfb471251017c6033dfc47d0590b2313d1a22c27c0733d37dfc74a17edd05851c7a55fa63ba7ac5af4adc45abd9a1d3d4eabc994f9389f331c0a38b4fdb472c3ad0b443f68fb53e4164ff62288a522687b9417058114412dabbb94aebf05cee866d0", @ANYBLOB="50800d451dc07789000090a187e5de3bda79685eef97b76463b2758a4213f7b98d31ac00000800000000000000"], 0x4) 02:22:34 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r1, &(0x7f0000000140)={@val, @void, @eth={@link_local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4b549f", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}}, 0x4e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) r5 = socket(0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r5, 0x1, 0x1, &(0x7f00000000c0)={0x438b}, 0x4) 02:22:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x7}}}, 0x24}}, 0x0) 02:22:34 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003060200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) 02:22:34 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x20008001, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0xac14140d}, 0x10) getpeername(r0, &(0x7f0000000900)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, &(0x7f0000000980)=0x80) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x40002000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="ab553fec94248c32e27d04000000288a", 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xd86dac9, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x48}}, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000080)) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0x3, @default}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) sendfile(r2, r1, 0x0, 0x8000000000004) recvfrom(r3, &(0x7f0000000100)=""/94, 0x6adcb3def6f8f87f, 0x10100, 0x0, 0x0) 02:22:35 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r0, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$bt_hci(r1, 0x0, 0x1, &(0x7f0000000340)=""/245, &(0x7f0000000440)=0xf5) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=[@iv={0x0, 0x117, 0x2, 0x0, "15dc91768c78ba00960b7a5e4e7907526d7c7c8aee968a562b00cb905e1826a8f9ee0ac480576a7134801fc070041984c5c23fa0f93b59075853f70545ce9c61b15ff65cde5078b4209217f0220f0810f739bd470d405272edb16434a11869d08d8fef065de94710ee553b410c3c02a96c156836af8d11c4af4a77e766f9ed8ec43830fe02bb22babf9b41d4e5027b49ba3f720465bf4ee9b63892030f4fea97d94bc6cd1a7d4d6869cb3185e5da3ca0da"}, @op, @assoc, @assoc, @op, @op]}], 0x4924924924924b3, 0x0) setsockopt$netrom_NETROM_T2(r2, 0x103, 0x2, &(0x7f0000000480)=0x4, 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000280)={0x28, 0x0, 0x0, @host}, 0x10) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x500000a, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x400fffe, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000240)={0x2, 'veth1_to_team\x00', {0x9ae}, 0x7}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0xb0, 0x76, &(0x7f0000000040)="dd29f0cb48d9a2eeec9ec647916ca8a8ee0946f08176e9469bc876938597da83c71344072f18cba8b6acae5cdb0c6cf9dc2d1cec587dc48989cdc56af6ad020a4960d3fae4698979dfc6f8a8eaa9551ea64e9c021a71688f22aadf00617b2986ed493b7ab95819c5c1624050ff5f4e0c2c065be01ed3b10f0df2149b5c3b4851358359de284d25534588e123335c4493d325a57855524ab6788ec1719665876540202be1b5e75c3846db23de4d6f1456", &(0x7f0000000100)=""/118, 0x1000, 0x0, 0x41, 0xf1, &(0x7f00000002c0)="b688d6342f5ab0df718a839e56f16d727dabce10a04fb991886e9a342903ccff30228f5e8aa732a80723cdf80301d2792b05bfed7d4ca06ac00eb94aad2c69582d", &(0x7f00000006c0)="5d9220604672988e19fa5919a7c253e5420c339eea50e02c70884828eb72f9e99148d8fbdbd89251c9176fb7a5de209d26be58f28b143b9ec6205ee3ff99b23d48084b4f4f7a76ac03fd85027bdcfa7c8f9f0d45e7f84c3df1ef134032fdd25ceaea7f2d65a5472538de624a0d8a95176d5fc2d572b2b70d0e1345d106a9648424a089f6d5f0afbe244e0dbf8c789b2d1b75768141876e613f9b71b4b02c0f95f9b648b55afc4f3dd6c658a4471fbba80d8a5ed98e6789e1680fdd076022207db01e686b9722f334b55010ed9facdcd7e84953d8f8bec844def81ea2f251e43a2f3ff4d7d4cc320e1f22ac4f735b6d7b0b"}, 0x40) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f0000000200), 0x8) [ 3099.544245][T21024] IPVS: ftp: loaded support on port[0] = 21 02:22:36 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r1, &(0x7f0000000140)={@void, @void, @eth={@link_local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4b549f", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}}, 0x4a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socket(0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 02:22:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x8}}}, 0x24}}, 0x0) [ 3100.124649][T21024] lo speed is unknown, defaulting to 1000 [ 3100.211347][T21044] __nla_validate_parse: 13 callbacks suppressed [ 3100.211356][T21044] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3100.261968][T21049] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3100.331071][T21039] IPVS: ftp: loaded support on port[0] = 21 02:22:36 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003070200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) [ 3100.540641][T21069] validate_nla: 2 callbacks suppressed [ 3100.540652][T21069] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 3101.086399][T21024] lo speed is unknown, defaulting to 1000 [ 3101.099459][T21042] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 02:22:37 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r1, &(0x7f0000000c80)={@void, @void, @mpls={[{0x200, 0x0, 0x1}, {0x6}, {0x8001, 0x0, 0x1}], @ipv6=@udp={0xd, 0x6, "75418a", 0x0, 0x11, 0x1, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[@dstopts={0x7f, 0x0, [], [@pad1, @generic={0x80, 0x0, "67a6d52e2914fe878162661bb45ddf6c44dfa38cb63ceb94a85a507a2da1f1d1ecea2bdf38b96b3a8642131596b573d915de1b4474aa052311817a79315d08dd1874b13fc825ab51cfea819a18a4dc13bbded56dcae21596b8edde56f09f7e410e09d3d3ba24177b59a3a9e0df9c25f67d1ef065ecdd262ea5a852e881b854a26269afa1f20c3ac72c0aa99a98a692258c4077bdf22a5105a233872e38823a6c5b930e0b28148d42259b445b992c67853137a247c06c73d90dcd7cfc99f6220a4b45108219"}, @padn={0x1, 0x0, [0x0, 0x0]}, @generic={0x7f, 0x0, "362b1029fe778467ac5d539ab714db172df39e2c790524f6a46db42daf09d4aa605486efcf2b484725fdcf6ab8668b1f29860d0ed859c47e100faec315702ba27e07ab8610baddfd8b96a2fb6282849d8a73981ea6766291faa342acde359310391fe6"}, @hao={0xc9, 0x0, @dev={0xfe, 0x80, [], 0xa}}, @jumbo={0xc2, 0x4, 0x7}, @ra={0x5, 0x2, 0x1}, @enc_lim]}, @srh={0x2, 0x0, 0x4, 0x0, 0x4, 0x18, 0x6b0, [@loopback, @mcast2, @remote, @local]}, @fragment={0x2b, 0x0, 0x6, 0x0, 0x0, 0x3, 0x68}], {0x4e24, 0x4e22, 0x0, 0x0, @wg=@response={0x2, 0x3, 0x3, "1a715fde6f0b4942788dbd9753db393e993779d2c055d019f778d7060ee21223", "a106551b216f041b54324a4a18df120f", {"681c0b75afdb5312e87b84a737428775", "1d5fc968663a12f0381170ca6c4d0fb4"}}}}}}}, 0xfffffffffffffe00) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socket(0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8}]}], {0x14}}, 0x7c}}, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r5, 0x8983, &(0x7f0000000280)={0x1, 'rose0\x00'}) r6 = socket(0x29, 0x80000, 0x0) sendmsg$IPSET_CMD_HEADER(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0xc, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x44040}, 0x0) [ 3101.191728][T21073] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:22:37 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x189002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000100)=0x80) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={0xffffffffffffffff}}, 0x841) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r5 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6, 0xfdc}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0xfffffffc, 0x10}, 0xc) r6 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6, 0xfdc}}, 0xe8) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r7, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r8 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x2c}, {}, 0x0, 0x0, 0x1, 0x1}, {{@in=@rand_addr=0x7fffffff, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x3, 0x0, 0x6, 0xfdc}}, 0xe8) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYBLOB, @ANYBLOB="60000000003f87fae252b1f4ef335a31acbdc04fb83dd6dfb471251017c6033dfc47d0590b2313d1a22c27c0733d37dfc74a17edd05851c7a55fa63ba7ac5af4adc45abd9a1d3d4eabc994f9389f331c0a38b4fdb472c3ad0b443f68fb53e4164ff62288a522687b9417058114412dabbb94aebf05cee866d0", @ANYBLOB="50800d451dc07789000090a187e5de3bda79685eef97b76463b2758a4213f7b98d31ac00000800000000000000"], 0x4) [ 3101.326357][T21069] netlink: 'syz-executor.2': attribute type 9 has an invalid length. 02:22:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x9}}}, 0x24}}, 0x0) [ 3101.807404][T21111] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3101.931833][T21114] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3101.959159][T21117] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:22:38 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8}]}], {0x14}}, 0x7c}}, 0x0) connect$netlink(r5, &(0x7f0000000200)=@kern={0x10, 0x0, 0x0, 0x100}, 0xc) write$tun(r1, &(0x7f0000000140)={@val, @void, @eth={@link_local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4b549f", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}}, 0x4e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socket(0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f00000000c0), &(0x7f00000001c0)=0x8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 02:22:38 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003080200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) [ 3102.065138][T21111] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3102.184808][T21117] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3102.195428][T21143] netlink: 'syz-executor.2': attribute type 9 has an invalid length. 02:22:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xa}}}, 0x24}}, 0x0) 02:22:38 executing program 1: syz_extract_tcp_res$synack(&(0x7f0000000740)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, r0, 0x0, 0x0, 0x5, 0x11}}}}}}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000740)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, r1, 0x0, 0x0, 0x5, 0x11}}}}}}, 0x0) syz_emit_ethernet(0x1bb, &(0x7f0000000240)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "7180d8", 0x185, 0x6, 0x1, @local, @dev={0xfe, 0x80, [], 0xc}, {[@routing={0x32, 0x12, 0x1, 0x0, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, @private2, @private2={0xfc, 0x2, [], 0x1}, @mcast1, @private1={0xfc, 0x1, [], 0x1}, @private0, @local, @mcast2]}, @srh={0x3a, 0x6, 0x4, 0x3, 0x1d, 0x10, 0x3, [@mcast1, @private2={0xfc, 0x2, [], 0x1}, @private0]}, @fragment={0x3c, 0x0, 0x5, 0x0, 0x0, 0x3, 0x67}], {{0x4e22, 0x4e20, r0, r1, 0x1, 0x0, 0x9, 0x20, 0xff, 0x0, 0x5, {[@sack={0x5, 0xe, [0x0, 0x9, 0x0]}]}}, {"75c975d28e969047cc25478d4d93505395e9064a9d3f2b0a2727c937380f251a57961ac5b6cd23c7f42be7d1f4a97d2b69269b1ed30bd8013d6878466cc818fa80cd914dff28643b250664e57d204c688b48381cd3bebb5fcbce1c41a8995785e42ad8e612ddae83068dd1173db8266d496c34edcbb64fc183cd334393371be79758849ddf4f7f7e8f"}}}}}}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendto$llc(r3, &(0x7f0000000000)="e8a409567289e7ff6d561f202b94d909d5419a3f1694fc41d884a3714e61d5c11498cc566c6d6294f90381d54d1bbb9461e06a96c1991d0a96d0e2beb87e8a97ce2f7272adf63034f6fa20c6420f2a6e316f186e47ed255d205ae8a08a34ec74e627be51c1e88fbb52de09a2ca444a2f47f0cc1224d1043c90ab59f04a", 0x7d, 0x4000, &(0x7f0000000080)={0x1a, 0x338, 0x81, 0x98, 0x8, 0x4, @dev={[], 0x10}}, 0x10) sendmmsg$alg(r2, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=[@iv={0x0, 0x117, 0x2, 0x0, "15dc91768c78ba00960b7a5e4e7907526d7c7c8aee968a562b00cb905e1826a8f9ee0ac480576a7134801fc070041984c5c23fa0f93b59075853f70545ce9c61b15ff65cde5078b4209217f0220f0810f739bd470d405272edb16434a11869d08d8fef065de94710ee553b410c3c02a96c156836af8d11c4af4a77e766f9ed8ec43830fe02bb22babf9b41d4e5027b49ba3f720465bf4ee9b63892030f4fea97d94bc6cd1a7d4d6869cb3185e5da3ca0da"}, @op, @assoc, @assoc, @op, @op]}], 0x4924924924924b3, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) 02:22:39 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_all\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) pwrite64(r1, &(0x7f00000002c0)='_', 0x1, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)=0x1000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8, 0x0, 0x3000000}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) [ 3103.257934][T21160] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3103.353492][T21179] netlink: 'syz-executor.2': attribute type 9 has an invalid length. 02:22:41 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f00000001c0)={0x0, @l2tp={0x2, 0x0, @broadcast, 0x2}, @sco={0x1f, @fixed={[], 0x11}}, @l2tp={0x2, 0x0, @local, 0x3}, 0x2, 0x0, 0x0, 0x0, 0xfff, &(0x7f00000000c0)='bond0\x00', 0x80000001, 0xffff, 0x7}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r1, &(0x7f0000000240)={@val={0x0, 0x6007}, @void, @eth={@link_local, @local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "3459df", 0x282, 0x6, 0x1, @remote, @local, {[@routing={0x67, 0xa, 0x1, 0x8, 0x0, [@mcast2, @loopback, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0={0xfc, 0x0, [], 0x1}]}, @hopopts={0x2c, 0x3b, [], [@hao={0xc9, 0x10, @loopback}, @pad1, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0x10}}, @generic={0x1f, 0xbd, "1a3e0da4f0e33b35f85e7be32a62cf262bfb4a0110cf32bcf87ca50aab76876e72c397ab2e94a03b6223c5f98f8ec8859ef46fb530a702476457e9c697f42d0f539e783537fcf71df75beb4224cb7e02fb97db8acbb8c6137b3329c9e23130a3300e107231b7394aa2d3270ef6a8076d83ffb7d14a5e1b4d702f377fd84245180ba6dc40058cc8382e0e6cde9ce8dce1a801ea2dcd4bf554efb291715e7cee7bfe624fd872b36a2804f67498834f148a243ca5d92bf570fe028590c188"}, @enc_lim={0x4, 0x1, 0x40}, @generic={0x62, 0xed, "e1f336e8896844a2e10c73889a6efa81a4d1c38b08af4ae3c2bd49325981fb27f918da15fe071d822d211e4329ffcdb5892c51a87f0dc7e754bc52e45bdcb5543447d4bfafc4b44a10c854b1c44b55fc36ecd23b8aaafc86abcaa380a89eb239428933b118dbea9889659229be2c2f8b9955210bcfab4c7b7dd21d7303dd58513fff5faccc7c2038f6b88a498b9a00aa2d5dbf15c66e088bb739092f7d8d26ab8cb1a77fe26c4a8925de9bd102e7d5bdd5cdfcf5b768ef84daabfc5f60ff9b99e7e444de463eba3e2c824fefe5e140d85532a2893c32bae84fc286c90290be3ada8dd06d902198188511efa68b"}, @enc_lim={0x4, 0x1, 0x80}, @padn={0x1, 0x1, [0x0]}]}, @fragment={0x2e, 0x0, 0xff, 0x0, 0x0, 0x0, 0x67}, @fragment={0x3c, 0x0, 0x7, 0x1, 0x0, 0x6, 0x64}], @payload_mcast={{{{{{0x32, 0x0, 0x0, 0x0, 0x1, 0xb, 0x3, 0x2, 0xbd, 0x0, 0x3, 0x9, 0x1, 0x1, 0x101, 0x4, 0x2, 0x4e22, 0x4e23}, 0x3}, 0x3, 0x3}}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}}, 0x2bc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socket(0x2a, 0x0, 0xffffffff) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 02:22:41 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="10002dbd7000fbdbdf250200000006000200bb086f1f9c6cdc35fbff00400500220001000000a2bfef24308b108b1cc65c702e88afddd3026aec2f2e8456af62b0c8a173f22762302648e9e28c46077282969dbdb961637ae084a9bf533e1b4b41d0a5d76795ddbfb47245042ebf98718c04d12922772e9c36b035688693d103f05aeed5f93ecb3e5209aab5fbb132069524e2cb0919e4a3eea476315c05b5b8b2d7c1d9805f0c82a5568e85a21f1551d046c6e063fba57d19fb732d2a235f0b091bb4b9e8c651039b4b6ae1c13b11b344bbb410bc44e34ff8d9d02caa8a6d6e3983b9dde6458e15e140eb"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000002400020300001bddea06000000bbd4aa803591995b1ec804dbdd0a0cf16de973d806ee9ac357980760219f1c1245d4e77c0d2bbeae030000006c889de3dffb19313d099d2f00ecd81987de8336dc65bc3c91ffe5ac6ac54224138b8e4dd5bf31038365d480c1b8b7fb9770359e51353e203eb5f9b730765e26552f2b1111efa47c22bbaa7f58d9ef36d5237fa4c3c5066f30b7b3085e4b9934298a4e699ed4fc6065eb4b3451fc3b92af7f7bb7e070c33eb7f084b882dc9f613dfb1ad4a0c65155eb1fae79a3744dfd5bc1455c64910323b6"], 0x1c}}, 0x10) 02:22:41 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000040), 0x10) poll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8}]}], {0x14}}, 0x7c}}, 0x0) read(r2, &(0x7f0000000000)=""/34, 0x22) 02:22:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xc}}}, 0x24}}, 0x0) 02:22:41 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003090200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) 02:22:41 executing program 3: socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101}, 0x14}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, r2, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r2, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$sock_qrtr_TIOCINQ(r3, 0x541b, &(0x7f0000000000)) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x54, r6, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}]}, 0x54}}, 0x8884) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r8, r4, 0x0, 0x4) [ 3105.079916][T21225] netlink: 'syz-executor.2': attribute type 9 has an invalid length. 02:22:41 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x26e1, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r0, &(0x7f0000000300)=0x9, 0xfffffffffffffd03) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0xfffffffffffffe7f, &(0x7f0000000680)}, &(0x7f0000000240)=0x10) socket$inet(0x2, 0x80001, 0x82) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000200)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x72, &(0x7f0000000080)={r2, 0x0, 0x0, 0x0, 0x2000000000}, &(0x7f00000000c0)=0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={r2, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e23, @broadcast}]}, &(0x7f0000000140)=0x10) socket(0x23, 0x0, 0x20000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000180), 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0, 0x47ff}) r4 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) setsockopt$PNPIPE_INITSTATE(r4, 0x113, 0x4, &(0x7f0000000380)=0x1, 0x4) [ 3105.264299][ T29] audit: type=1804 audit(1595470961.588:4817): pid=21242 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir464691444/syzkaller.RbUOvR/3377/cgroup.controllers" dev="sda1" ino=15887 res=1 [ 3105.371489][T21239] __nla_validate_parse: 5 callbacks suppressed [ 3105.371503][T21239] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3105.418009][T21227] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3105.487188][T21265] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 3105.502944][T21227] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 02:22:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="ff000000000000002400128009000100626f6e64000000001400028008000300040000000800040000000000"], 0x44}}, 0x0) 02:22:41 executing program 4: r0 = socket(0x10, 0xa, 0x0) r1 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={0x0, 0x1fe}, 0x8) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1a000}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000015c0)=""/4096, 0xe960}], 0x1}}], 0xffffff1f, 0x0, 0x0) ioctl$sock_netdev_private(r1, 0x89fe, &(0x7f0000000000)="28382e28dcc454548dac60960532c5b9170e5cac465295d9635459403369309fb39b8be40a8c1758d892a00a86c3687210448741c68a7cd7bfaab0a41d729100f2f3e3d792d7f7996ba5e578b3655d") bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x28, &(0x7f00000000c0)={0x0, 0x0}}, 0x10) r3 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={0x0, 0x1fe}, 0x8) socket$netlink(0x10, 0x3, 0x4) sendmsg(r3, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1a000}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000015c0)=""/4096, 0xe960}], 0x1}}], 0xffffff1f, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000240)={0x0, 'ip6tnl0\x00', {0x6c}, 0x7f}) recvfrom$inet6(r0, &(0x7f0000000280)=""/226, 0xe2, 0x1, &(0x7f0000000380)={0xa, 0x4e21, 0x6, @private2}, 0x1c) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={r2, 0x4, 0x10}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000003200)={'gre0\x00', &(0x7f0000003180)={'ip_vti0\x00', 0x0, 0x7, 0x8000, 0x5, 0xfff, {{0x11, 0x4, 0x1, 0x4, 0x44, 0x65, 0x0, 0x3, 0x29, 0x0, @private=0xa010100, @local, {[@rr={0x7, 0x1b, 0x9e, [@dev={0xac, 0x14, 0x14, 0x17}, @multicast1, @private=0xa010102, @multicast1, @remote, @broadcast]}, @end, @generic={0x89, 0x11, "fa3062e127f94b66dcf90327f96452"}]}}}}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000003400)={&(0x7f0000002600), 0xc, &(0x7f00000033c0)={&(0x7f0000003240)={0x164, 0x0, 0x855eee98471a0a2f, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x4040}, 0x84) [ 3105.595435][T21269] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3105.875571][T21276] 8021q: adding VLAN 0 to HW filter on device bond9 02:22:42 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a00030a0200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) 02:22:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xe}}}, 0x24}}, 0x0) 02:22:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xc}}}, 0x24}}, 0x0) 02:22:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000006600310f00"/20, @ANYRES32=r4, @ANYBLOB="310000000000ffff00000000"], 0x24}}, 0x0) 02:22:42 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r1, &(0x7f0000000b00)={@val, @void, @ipv6=@icmpv6={0x3, 0x6, "ecf016", 0x55c, 0x3a, 0x1, @local, @initdev={0xfe, 0x88, [], 0x1, 0x0}, {[@dstopts={0x0, 0x0, [], [@jumbo={0xc2, 0x4, 0x2}]}, @routing={0x3c, 0x4, 0x2, 0x6, 0x0, [@mcast1, @private1]}, @hopopts={0x2f, 0x1f, [], [@generic={0x0, 0xf7, "8f3b13cf9127d40755a42a220a330f62b8771d33af2576f26199f41e374c5db37d119f86b5ab9a31b25a2221d540c39a76d38bea79a422d6505a88718b2a0b72bdaaa9086ca468da6c5d43cd2c98b3f6bae8a08d0dd226711ef9228969fe14be74cf321b1e34a9fd783903a7acbc3a4a68c96b3dee346a9e4bd16630a7565d9063fc3c5d0b07b0c81ce15741c2236ef4ae7e69573b395eddce1b00b0c30bf6443fd71e9949ce3735effe2c8684a051b7c7b285b2f37c77490ff2d6ab81a28373ac6f74156072eb4a54614f46065bff1f10a3d58c8fc0ae0d4e341a35e015fcd97d07576e5104925cd6213d2987f29798c12ddc1c7b525c"}]}, @routing={0x89, 0x0, 0x2, 0x3d}, @srh={0x6, 0xa, 0x4, 0x5, 0x9, 0x10, 0x800, [@empty, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @private2, @mcast1, @mcast1]}, @hopopts={0x5e, 0x24, [], [@calipso={0x7, 0x10, {0x2, 0x2, 0xa2, 0x1, [0x94]}}, @calipso={0x7, 0x38, {0x0, 0xc, 0x0, 0xfffa, [0x9f, 0x8, 0x0, 0x4, 0x4, 0x1]}}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, [], 0x1}}, @padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x8, {0x1, 0x0, 0x23, 0x683}}, @generic={0x5, 0xa7, "5011137e5fd71b0b2eab991551b8a96a57b54f34a3d507fd888b87b0e4837a9e4f6966a5bec60dbd9f8ee68a65f589e1db09f5cf4fd2e73f0027c5b2ba2cd47fb8c49c6587180cceae4a8b507428d51bf2f50bf3d3c4e64376c61ff77ace8cdffa985db4947af51998d3ca0aebe9b47231f2463e96cb82552cee497a592b758798e84c450cae61a593344870cd563036d3f5566dfc8acec3be9245658e522c0871e90b4c5a3b73"}, @hao={0xc9, 0x10, @private0}]}, @routing={0x1d, 0x2, 0x0, 0x20, 0x0, [@dev={0xfe, 0x80, [], 0x26}]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x2, 0x2, 0x8, 0x7, [{0x1, 0x7, "0ba78c2a3a71ad6b9dac8d7e9e843f3efb661e76dfee6687f8a5da3fe809764ebc79cc2c6c4a06c6ff92d336ec53859a7586e6d3732f86c46b08"}, {0x1f, 0x1c, "1c21d456e8197279cad5ed07f7768ec04251816202af047cb7868a9753c37f56b41687379e048136cffecbf765a729b0a33ada4cff8276093527d620f0ad41ee9ae518248ad7a4ae1c23204f4c2c3c22f6b44f1d66810c5c1dead417030d98b67f81e811a6edf2239e526f99a1ad89961151bd729c275d01ed83a1e0150caf69d431175eca8dd42b6919235da287f0058503c7451c892df484ab4be14797193703556d78e4cdcdff06c000a510cf0018d18563b8b102b4f35ee7ffdab01ba9e384ff9cadb53cdce660e2cfef81fd138878af9abeeb3ae1468c76d4ebeb97c8"}, {0x5, 0x12, "0c27c4ea0cfee835589cd84ced81fde121b34b4c00aee5fff1727ddb8d2dd3d005eecfc2f83cb06596c0a14d12b2488b1ab3775a8b3928de6c07b7f084c6d07db84079afa01004aaa5439b16d9d1092083acd147e27d2acf81b3585b3d4f2b04a8edcebf855c79f6f7abc9792295fca70575f41783c9de1659eadbb0dd3fb512f062e76512ba24e9ea4c99de4434a33e7b6d"}, {0x5, 0x16, "ae7c37e19ca1329b724350f7f87675a4fc4f262ff429922d576dcec3c6ceb7d797a189d9500db22ed0fc5ee7cae9e1adc9ec46264dd0c7a4595565e753060d537174944c1af5300ee13988e9b554fb657edf6875ca642a00e2444dd06b2e2a2bf4c4d01a6aff27215e947300828fbfe3d064972b31bb0f42ff94ea94d84b6368e974d843b6c2f1090233605ffe9a7eed84df30022977fa31ec91cfa2298285a6e3d1cc48da3cecba39855123e709d8ad1e"}]}}}}, 0x588) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socket(0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@mcast2, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, r5, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @dev={[], 0x1d}}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @remote}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x3}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000400)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4}}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000480)=""/108, 0x6c}, {&(0x7f0000000500)=""/243, 0xf3}, {&(0x7f0000000600)=""/103, 0x67}, {&(0x7f0000000680)=""/181, 0xb5}], 0x4, &(0x7f0000000780)=""/2, 0x2}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r6, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x140e, 0x20, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x28}}, 0x64008001) [ 3106.008421][T21330] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3106.075236][T21336] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3106.085420][T21339] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 3106.104143][T21343] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3106.164460][T21344] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3106.212634][T21330] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3106.403257][T21351] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3106.487909][T21377] netlink: 'syz-executor.2': attribute type 9 has an invalid length. 02:22:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=[@iv={0x0, 0x117, 0x2, 0x0, "15dc91768c78ba00960b7a5e4e7907526d7c7c8aee968a562b00cb905e1826a8f9ee0ac480576a7134801fc070041984c5c23fa0f93b59075853f70545ce9c61b15ff65cde5078b4209217f0220f0810f739bd470d405272edb16434a11869d08d8fef065de94710ee553b410c3c02a96c156836af8d11c4af4a77e766f9ed8ec43830fe02bb22babf9b41d4e5027b49ba3f720465bf4ee9b63892030f4fea97d94bc6cd1a7d4d6869cb3185e5da3ca0da"}, @op, @assoc, @assoc, @op, @op]}], 0x4924924924924b3, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000240), &(0x7f00000002c0)=0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r5, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x121, 0x0, 0x0, {0x2, 0x1, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_FLAGS={0x8, 0x8, 0x200}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}}, 0x18}}, 0x0) 02:22:42 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f0000000180)=0x3, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_vlan\x00', 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc), 0x4) close(r1) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000100), &(0x7f0000000000)=0x68) connect$inet(r0, &(0x7f00000000c0)={0x2, 0xce20, @remote}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r2, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) ppoll(&(0x7f0000000080)=[{r2, 0x80}], 0x1, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140), 0x8) sendmmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000001d80)=[{&(0x7f0000000640)={0x27, 0x1, 0x0, 0x1, 0x2, 0x3f, "608efce9c2568abd856754ccb959f6b2c44696815f6ecf838e604cf77d2c561e304849bb719e0cfa319e3d9aa2d5c3a897fded3ebccb92b526d18836b0809a", 0x27}, 0x60, &(0x7f0000000800)=[{&(0x7f00000006c0)="9c207cc321547450c16b6a3726600e5e8bfb2c6a1d412e5136c363f3beb3b46cfd49daf9c37faf9853191033bd829c4701af968c4f856d0b712413c6c1e4b873e45081411d2c9ab6d0a4c033c108c8d48e366038615678656fa0ff10bba6153bf2bbed7031fbf021d49290eda968415b44386ac83c077d", 0x77}, {&(0x7f0000000740)="1d9a272dfd771219bcedafaae0b7d0552cea3f250a8f7b64d3e9f9df2cd0c815cd3fa9a289721fc56dbc11253c4cb227577b7b3c3bd537a1f9b4103e87f027522f0ebee10c7e70dfb7697db21b7128bac2dd5bfed9534fd88bc68396ff064476a1a7df2a64c1b27107df0efd6a5c", 0x6e}, {&(0x7f00000007c0)="73ddd795a8ba5c935ec19798b9156baa398e7cafa65dd578f34e4d9fccfaf470ead15e", 0x23}], 0x3, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], 0x1010, 0x800}, {&(0x7f0000001880)={0x27, 0x1, 0x8, 0x7, 0x3, 0x6, "461ea28ce54558173394e8e9c1cad8bcb408d22f014ab8730b98b6c53a9f107ab4c09319672751a6ea94f26c5f3e48c02331859c5b2bc05a9812916f2c8cb9", 0x2f}, 0x60, &(0x7f0000001c00)=[{&(0x7f0000001900)="9f4b80740dc2c4ff49f0dc5faa6f35e0aa4868", 0x13}, {&(0x7f0000001940)="0949a15488572a0e01de1449a866cc052fe9146eed0610e03907f98b87235f1d245b5b73ae5efc418485731b72c0a569ef3a95621925971cdf2a4bccfc5775b72c9199d08ea56916e63cc27fcef1f5f1f370112bc9e5db790f112c3f584916a57ae9a264963d4da1a24e1a4ece4e923b82eb0f6eeaba3ddbf2202e4a5f3b7bef", 0x80}, {&(0x7f00000019c0)="22b0953d26bbe62cc9f9fd42bf15b84f6807af096a8ac6603a65575f157ee3697b3378d2509dc713d827c20d06a3a8af60014a0c24a29a4d3ebb6fc6b0b32cea90b64510", 0x44}, {&(0x7f0000001a40)="4c7ac41244fcf45dffba2cd7bd159977d25525fc0ca4eae8970a052b7afd237f83c98eb26847ae6870b22f552aebe9aeb4001eb3ce24b189aa23f655203e08a888d6e3e244531146bbda39aa976ac85f4ee3d3986c06a8373c0832650d0c0748b49f7aa99b2e6eaf4f3e75a51a512b363fdddd8e2751c6322fdb342f8d102b46a54671a3bcb63d26a28d6cea1d196c6a295c7ed91083873d8107f2b2ed8d6690bdccb6dedbe7ab4f905a8100d05ebfbaca68468302ae4bd9c23b056ef3ca40a61e26ade8ccde7ff4", 0xc8}, {&(0x7f0000001b40)="5b4958e7036d8b9876a853a675f270fff08bec11d8ed2589ad52ae4cc1861483d40b02570e0d338f13c2a8546431fa36711e77af38728966daa00cb10fc8b409f1783ad159b7b34fce0836f80c5464381b5e31e9fd58f8f2038b343e4167ed8c2ce835f1328841c9d5d10ad393adc9c963e913d5ab798cbdd2bba154b3d3629701edd7034348995097a3d76c786d0c80233f8ad7289e96a4f6c9f2a20463fd62ca789e7c33d56dd1496688c56d6d60d5b575dc64cb", 0xb5}], 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="e80000000000000017010000f80000008f0d504523c500df7a2ae596f91ff780b4d1c34adf406d9cac6e0e039326945f1c44f016fcff4206c23fb87e4154e332d63c28ebecf1e8e13bdce5bdd3f58b731a7e22a0f86f18c447921e722f95aa833b7c8d679bc4b7a1bb55db699bfe3e17456e9f52cc98ee261d51d175ad50715cdc81214e449363d31cb4744d1197de82d1c5e2c90efaf631794946173321fe23b0b0918e1eef4775ea144186e9f84937bd4f51190918a7bd9a665e7d85fc040bb003d7db74b382f4af13d5878cad23e934fc83836fcd3e438aa8a83f82a050be0cab95949800"/243], 0xe8, 0x2}], 0x2, 0x40000) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f000000ab80)={0x0, 0xfffffffffffffd57, 0x0, 0x1, 0x0, 0x0, 0x10000}, 0x40000) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000380)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@local}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@private2={0xfc, 0x2, [], 0x1}, @in6=@rand_addr=' \x01\x00', 0x4e20, 0xc6, 0x3, 0x40, 0x2, 0x80, 0x80, 0x1d, 0x0, r4}, {0xdbd4, 0x392d, 0x7, 0x2, 0x0, 0x5}, {0xbc15, 0xff, 0xf443, 0x10001}, 0x0, 0x6e6bbc, 0x2, 0x1, 0x1}, {{@in6=@ipv4={[], [], @loopback}, 0x0, 0xff}, 0xa, @in=@private=0xa010101, 0x3504, 0x4, 0x1, 0x36, 0x2, 0x5, 0xe3}}, 0xe8) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@local, @in=@private=0xa010102, 0x4e24, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x20, 0x2e, r3, r4}, {0x8000, 0x100000001, 0xffffffffffffffff, 0xfff, 0x80, 0x16, 0x9d8, 0x6}, {0x9, 0x3, 0x0, 0x5}, 0x7, 0x6e6bb1, 0x2, 0x1}, {{@in=@dev, 0x0, 0x33}, 0x2, @in6=@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x3, 0x0, 0x7, 0x8001, 0x3}}, 0xe8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) 02:22:43 executing program 4: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x304, 0x10, &(0x7f0000000000), 0xfffffea2}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xe000000, &(0x7f0000000180)=[{&(0x7f0000000000)="2e000000120081aee4520cecff0e00fa078b5bdb4cb904e473730e55cff26d1b0e001d80040000005e510befccd7", 0x2e}], 0x1}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x10, &(0x7f0000000300)={r3}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={r3, 0xd0e}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r3, 0x10001}, 0x8) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) splice(r4, 0x0, r6, 0x0, 0x20000000003, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8}]}], {0x14}}, 0x7c}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f00000000c0)={r0, 0x8, 0x5c3c, 0x261}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r8, 0x204000, 0xce, 0x0, &(0x7f0000000440)="3d6ee2e04b91ab10f30f9b7053f622b28763418e7a1706089ddd269f9071160acb73101eece3630f99ed83a5b7cde4822769e9bfb3119734f3bfc9253a2980306d2a19a9ec007b71d2ba1a5f5e16533b04838387d145f54d3baaf8828610d564d978d1ebd7cc14a53d5ec59a8c2d019a0662801a7ad44edc88cfa93b2ba18b6454f88f00072f7f97ae11a98621d61906c575eed4f55e1f67a997b256e2fcbc4d5cab46fb16d060a6f493c6a5e610e575800c811158ba28743f92705d7e35b76e11f7e2ddd7028e00000000000000", 0x0, 0x3ffc, 0x0, 0x92, 0x0, &(0x7f0000000280)="d855f14a83d200d0467a6e5f9f9141196b9cdd8e06c049817938ba5f987a2e8646e499ce05e5d1cb753bb226709e79d187b68376e458c85acbf659d8c25794f683d14e837947a16a16d8d3a51ea86e16ff0ae4e3803c16e46e7282f8bc8cff3f9cb326c940040074e6f21c236a30d257c1de169e161c1c874f1ac0dd091b8c815e9e3642a79654f7f69fa0a4cb56adfec456", &(0x7f0000000080)}, 0x40) 02:22:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x10}}}, 0x24}}, 0x0) 02:22:43 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a00030b0200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) 02:22:43 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000180c2000000aaaaaaaaaaaa86dd604b549f0014060000000000000000000000000000000000fe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000014ba973d296d73343b2c1997780000"], 0x4e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) [ 3107.225022][T21425] netlink: 'syz-executor.2': attribute type 9 has an invalid length. 02:22:43 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x7b, 0x11, 0x30, 0x2}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0xfffffe3e) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[], 0xfffffe3e) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x17, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61, 0x0, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [0x61], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={r6, 0xfd, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x1a, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000024eaff0ff2a4d129e62b2c18850c5c7cb99877460474f3f47dd3a081ba9d8f470c09c0d22477fe43dc05a69a58b33247639e5c0b81ab97187fc4077f56ab7379ce6cadfb9373ba97170f92ebb35915c433cbb96defbb032e92621f0638e551101666fd4fcd41cbc1d35133cfc9e2e486a82187587280218be365d33090"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7, r6}, 0x74) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r7, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x1a, 0xf, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x400}, [@generic={0xfe, 0x2, 0x1, 0x3, 0x1}, @exit, @jmp={0x5, 0x0, 0x6, 0x0, 0x5, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0xc096}, @alu={0x7, 0x0, 0x7, 0x7, 0x8, 0x8, 0xfffffffffffffff0}, @map_val={0x18, 0x1, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x73}, @map_val={0x18, 0x8, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x91cc}, @jmp={0x5, 0x0, 0x4, 0xc, 0x8d095c350f52da29, 0xc, 0x4}]}, &(0x7f0000000100)='GPL\x00', 0x2, 0xf0, &(0x7f0000001200)=""/240, 0x41100, 0x0, [], r5, 0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000001300)={0x4, 0x10, 0x1, 0xa43}, 0x10, r7, r0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002580)={r8, 0x0, 0x58, 0x1000, &(0x7f00000013c0)="567373f1e605280d25b0aca4a50f8c69dabdb6fdfd23e661bc4f8a541f09f02b0d90f59e89c0d80dcf5abf3408fbdd30983595df2ddd7fe869b558da5baddedbfb61242be20cc83d1fdd29060478461245929a39cea67280", &(0x7f0000001440)=""/4096, 0x4, 0x0, 0xf4, 0x34, &(0x7f0000002440)="6471802f3aa3b16c61ca7ff5829f7b365dd53a3ffc7399a47a1a56475572c81b986de2c864bab8a9f478ba8034892f609efc00e96bd377f31e6cf36be959eaf9f9d431f7dc512e965902c6515e1861343353686535e53e3a3d6c3577737ab4ed347f5b0da1c0270a1e4647d2f3da05a949c50f69d7a0db7cdceb69ef3562a1a3de14287928f810afe17b581782d9ee78307ae50fbd237beb4d7be5f15239a5e1670472124f383c457eee6d9c72e8ed17f26d60ed0128ecdb211419017afeea64a21173154949c8f19a69ada6289204a394f26ab66eb3043a3767f4e243a956f672f5cf87ae2b33967ea6335953f3bc3a03b5effc", &(0x7f0000002540)="d161862e84f4dedb2c381b772de36cbb1ca1063cd851ed0dbbe28015d501b958951ee11b34c219396c5db3a32e2f9e5c14045591"}, 0x40) [ 3107.546170][T21425] netlink: 'syz-executor.2': attribute type 9 has an invalid length. 02:22:43 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x6, 0x10}, 0xc) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="fe", 0x9400}], 0x1) socketpair(0x6, 0x800, 0x7, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket(0x10, 0x803, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0xe000000, &(0x7f0000000180)=[{&(0x7f0000000000)="2e000000120081aee4520cecff0e00fa078b5bdb4cb904e473730e55cff26d1b0e001d80040000005e510befccd7", 0x2e}], 0x1}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000340)=0x8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$TUNDETACHFILTER(r5, 0x401054d6, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x10, &(0x7f0000000300)={r4}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f00000000c0)={r4, 0xd0e}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={r4, 0x9, 0x10}, 0xc) 02:22:44 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f0000000180)=0x3, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_vlan\x00', 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc), 0x4) close(r1) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000100), &(0x7f0000000000)=0x68) connect$inet(r0, &(0x7f00000000c0)={0x2, 0xce20, @remote}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r2, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) ppoll(&(0x7f0000000080)=[{r2, 0x80}], 0x1, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140), 0x8) sendmmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000001d80)=[{&(0x7f0000000640)={0x27, 0x1, 0x0, 0x1, 0x2, 0x3f, "608efce9c2568abd856754ccb959f6b2c44696815f6ecf838e604cf77d2c561e304849bb719e0cfa319e3d9aa2d5c3a897fded3ebccb92b526d18836b0809a", 0x27}, 0x60, &(0x7f0000000800)=[{&(0x7f00000006c0)="9c207cc321547450c16b6a3726600e5e8bfb2c6a1d412e5136c363f3beb3b46cfd49daf9c37faf9853191033bd829c4701af968c4f856d0b712413c6c1e4b873e45081411d2c9ab6d0a4c033c108c8d48e366038615678656fa0ff10bba6153bf2bbed7031fbf021d49290eda968415b44386ac83c077d", 0x77}, {&(0x7f0000000740)="1d9a272dfd771219bcedafaae0b7d0552cea3f250a8f7b64d3e9f9df2cd0c815cd3fa9a289721fc56dbc11253c4cb227577b7b3c3bd537a1f9b4103e87f027522f0ebee10c7e70dfb7697db21b7128bac2dd5bfed9534fd88bc68396ff064476a1a7df2a64c1b27107df0efd6a5c", 0x6e}, {&(0x7f00000007c0)="73ddd795a8ba5c935ec19798b9156baa398e7cafa65dd578f34e4d9fccfaf470ead15e", 0x23}], 0x3, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], 0x1010, 0x800}, {&(0x7f0000001880)={0x27, 0x1, 0x8, 0x7, 0x3, 0x6, "461ea28ce54558173394e8e9c1cad8bcb408d22f014ab8730b98b6c53a9f107ab4c09319672751a6ea94f26c5f3e48c02331859c5b2bc05a9812916f2c8cb9", 0x2f}, 0x60, &(0x7f0000001c00)=[{&(0x7f0000001900)="9f4b80740dc2c4ff49f0dc5faa6f35e0aa4868", 0x13}, {&(0x7f0000001940)="0949a15488572a0e01de1449a866cc052fe9146eed0610e03907f98b87235f1d245b5b73ae5efc418485731b72c0a569ef3a95621925971cdf2a4bccfc5775b72c9199d08ea56916e63cc27fcef1f5f1f370112bc9e5db790f112c3f584916a57ae9a264963d4da1a24e1a4ece4e923b82eb0f6eeaba3ddbf2202e4a5f3b7bef", 0x80}, {&(0x7f00000019c0)="22b0953d26bbe62cc9f9fd42bf15b84f6807af096a8ac6603a65575f157ee3697b3378d2509dc713d827c20d06a3a8af60014a0c24a29a4d3ebb6fc6b0b32cea90b64510", 0x44}, {&(0x7f0000001a40)="4c7ac41244fcf45dffba2cd7bd159977d25525fc0ca4eae8970a052b7afd237f83c98eb26847ae6870b22f552aebe9aeb4001eb3ce24b189aa23f655203e08a888d6e3e244531146bbda39aa976ac85f4ee3d3986c06a8373c0832650d0c0748b49f7aa99b2e6eaf4f3e75a51a512b363fdddd8e2751c6322fdb342f8d102b46a54671a3bcb63d26a28d6cea1d196c6a295c7ed91083873d8107f2b2ed8d6690bdccb6dedbe7ab4f905a8100d05ebfbaca68468302ae4bd9c23b056ef3ca40a61e26ade8ccde7ff4", 0xc8}, {&(0x7f0000001b40)="5b4958e7036d8b9876a853a675f270fff08bec11d8ed2589ad52ae4cc1861483d40b02570e0d338f13c2a8546431fa36711e77af38728966daa00cb10fc8b409f1783ad159b7b34fce0836f80c5464381b5e31e9fd58f8f2038b343e4167ed8c2ce835f1328841c9d5d10ad393adc9c963e913d5ab798cbdd2bba154b3d3629701edd7034348995097a3d76c786d0c80233f8ad7289e96a4f6c9f2a20463fd62ca789e7c33d56dd1496688c56d6d60d5b575dc64cb", 0xb5}], 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="e80000000000000017010000f80000008f0d504523c500df7a2ae596f91ff780b4d1c34adf406d9cac6e0e039326945f1c44f016fcff4206c23fb87e4154e332d63c28ebecf1e8e13bdce5bdd3f58b731a7e22a0f86f18c447921e722f95aa833b7c8d679bc4b7a1bb55db699bfe3e17456e9f52cc98ee261d51d175ad50715cdc81214e449363d31cb4744d1197de82d1c5e2c90efaf631794946173321fe23b0b0918e1eef4775ea144186e9f84937bd4f51190918a7bd9a665e7d85fc040bb003d7db74b382f4af13d5878cad23e934fc83836fcd3e438aa8a83f82a050be0cab95949800"/243], 0xe8, 0x2}], 0x2, 0x40000) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f000000ab80)={0x0, 0xfffffffffffffd57, 0x0, 0x1, 0x0, 0x0, 0x10000}, 0x40000) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000380)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@local}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@private2={0xfc, 0x2, [], 0x1}, @in6=@rand_addr=' \x01\x00', 0x4e20, 0xc6, 0x3, 0x40, 0x2, 0x80, 0x80, 0x1d, 0x0, r4}, {0xdbd4, 0x392d, 0x7, 0x2, 0x0, 0x5}, {0xbc15, 0xff, 0xf443, 0x10001}, 0x0, 0x6e6bbc, 0x2, 0x1, 0x1}, {{@in6=@ipv4={[], [], @loopback}, 0x0, 0xff}, 0xa, @in=@private=0xa010101, 0x3504, 0x4, 0x1, 0x36, 0x2, 0x5, 0xe3}}, 0xe8) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@local, @in=@private=0xa010102, 0x4e24, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x20, 0x2e, r3, r4}, {0x8000, 0x100000001, 0xffffffffffffffff, 0xfff, 0x80, 0x16, 0x9d8, 0x6}, {0x9, 0x3, 0x0, 0x5}, 0x7, 0x6e6bb1, 0x2, 0x1}, {{@in=@dev, 0x0, 0x33}, 0x2, @in6=@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x3, 0x0, 0x7, 0x8001, 0x3}}, 0xe8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) 02:22:44 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfef0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, 0x0, 0x0) pipe(&(0x7f0000008f40)) syz_genetlink_get_family_id$tipc2(0x0) syz_genetlink_get_family_id$fou(0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000200)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) writev(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000180)}, {&(0x7f0000000240)="5c8aae08aad2f771ad89190786df5a84d36e244413efbf1a999a7bbdbe170f51bccb2254542cf4a4bc0cc91f324c9e52970cf208bf7f6f411520ce8301e04f2f5317e0f330d849249e43f4c0ff8728fba38aa53434470964079e40a1402882730a517fab35de77ed7e", 0x69}, {&(0x7f00000002c0)="88705c8a3b7cdfb65cafa01a1c618bbf52ff1038284024661da457eff4218ab08bff105d905d8ddc3062767b59407432f9a4c1e2d5c0a93a57d23971a728e6fb13a1343f936b96c9dc45c2bcda0207038e2b6ca14af87fc7ca3a2a14d63d0e969e91478a670b76bc1a08c20289178adf9bf940d1c5d8a0cb9a7f831c", 0x7c}, {&(0x7f0000000340)}, {&(0x7f0000000640)="e95d3f462d373df306deb38bb2a39b303569931cc2bffefdbab646cdc2fb435206f9ff5db2e702b786d1be3c2ee78218ad6a380b42fe2d42ab5932a5fcd8ed78d163e2677406c3810d3eaa3c41369b6fa75b0670ada4df278b70756ac83a5531d0b07556f106858bc5d96bf2d34a02543db33840cc0d6f41c7aa9869b173a3aea0ea0fe74c4ec3a6", 0x88}, {&(0x7f0000000180)="4a01eda2102f4aa1e6068c48e8a72f7d615bf785ac7cf1b3414a1ce32865397ab9847652803467ddc0b234ef4a237009a95879c8ae431f8dcb59bbf61454d5b899a0d555c4fd53af749d688147a5ca82981fceac765394273b", 0x59}, {&(0x7f0000000380)="70384c336a7f", 0x6}], 0x7) socket$inet_sctp(0x2, 0x0, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 02:22:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x48}}}, 0x24}}, 0x0) [ 3107.983129][ T29] audit: type=1804 audit(1595470964.308:4818): pid=21481 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir251561709/syzkaller.UZqFTe/3889/memory.events" dev="sda1" ino=16067 res=1 02:22:44 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r1, &(0x7f00000001c0)={@val, @void, @eth={@link_local, @local, @void, {@ipx={0x8137, {0xffff, 0x82, 0x3, 0x5, {@random=0x7, @random="9a8c282fb7d4", 0x6}, {@current, @random="4ad3e2b01cb1", 0x1}, "d657fd0768ed98aa9fdc0ffe9baa957d5b326901465da66e73f4bdf691475ed94a99976764309ed72d360ed3f1b272190383ba6b497ce39927269b7f12c7f7d2f56f755fa68cc8d48db2e6a82a4506001652aafa3fec95e0e65f067395ac1200185af0d2"}}}}}, 0x94) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socket(0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 02:22:44 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a00030c0200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) [ 3108.063674][ T29] audit: type=1800 audit(1595470964.308:4819): pid=21481 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=16067 res=0 02:22:44 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a00030b0200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) [ 3108.194355][ T29] audit: type=1804 audit(1595470964.308:4820): pid=21481 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir251561709/syzkaller.UZqFTe/3889/memory.events" dev="sda1" ino=16067 res=1 [ 3108.232204][T21498] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 3108.314697][ T29] audit: type=1804 audit(1595470964.458:4821): pid=21489 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir251561709/syzkaller.UZqFTe/3889/memory.events" dev="sda1" ino=16067 res=1 02:22:44 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8010, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600) preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$IPSET_CMD_RENAME(r7, &(0x7f0000001200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x5, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x3097) mmap(&(0x7f0000891000/0x3000)=nil, 0x3000, 0x2000003, 0x8010, r6, 0x50c32000) [ 3108.749576][ T29] audit: type=1804 audit(1595470965.068:4822): pid=21489 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir251561709/syzkaller.UZqFTe/3889/memory.events" dev="sda1" ino=16067 res=1 [ 3108.775470][ T29] audit: type=1804 audit(1595470965.068:4823): pid=21486 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir251561709/syzkaller.UZqFTe/3889/memory.events" dev="sda1" ino=16067 res=1 02:22:45 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfef0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, 0x0, 0x0) pipe(&(0x7f0000008f40)) syz_genetlink_get_family_id$tipc2(0x0) syz_genetlink_get_family_id$fou(0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000200)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) writev(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000180)}, {&(0x7f0000000240)="5c8aae08aad2f771ad89190786df5a84d36e244413efbf1a999a7bbdbe170f51bccb2254542cf4a4bc0cc91f324c9e52970cf208bf7f6f411520ce8301e04f2f5317e0f330d849249e43f4c0ff8728fba38aa53434470964079e40a1402882730a517fab35de77ed7e", 0x69}, {&(0x7f00000002c0)="88705c8a3b7cdfb65cafa01a1c618bbf52ff1038284024661da457eff4218ab08bff105d905d8ddc3062767b59407432f9a4c1e2d5c0a93a57d23971a728e6fb13a1343f936b96c9dc45c2bcda0207038e2b6ca14af87fc7ca3a2a14d63d0e969e91478a670b76bc1a08c20289178adf9bf940d1c5d8a0cb9a7f831c", 0x7c}, {&(0x7f0000000340)}, {&(0x7f0000000640)="e95d3f462d373df306deb38bb2a39b303569931cc2bffefdbab646cdc2fb435206f9ff5db2e702b786d1be3c2ee78218ad6a380b42fe2d42ab5932a5fcd8ed78d163e2677406c3810d3eaa3c41369b6fa75b0670ada4df278b70756ac83a5531d0b07556f106858bc5d96bf2d34a02543db33840cc0d6f41c7aa9869b173a3aea0ea0fe74c4ec3a6", 0x88}, {&(0x7f0000000180)="4a01eda2102f4aa1e6068c48e8a72f7d615bf785ac7cf1b3414a1ce32865397ab9847652803467ddc0b234ef4a237009a95879c8ae431f8dcb59bbf61454d5b899a0d555c4fd53af749d688147a5ca82981fceac765394273b", 0x59}, {&(0x7f0000000380)="70384c336a7f", 0x6}], 0x7) socket$inet_sctp(0x2, 0x0, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 3108.843383][T21511] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 02:22:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x4c}}}, 0x24}}, 0x0) [ 3108.910906][ T29] audit: type=1804 audit(1595470965.228:4824): pid=21530 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir464691444/syzkaller.RbUOvR/3381/memory.events" dev="sda1" ino=16066 res=1 [ 3109.013489][ T29] audit: type=1800 audit(1595470965.268:4825): pid=21530 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=16066 res=0 [ 3109.062647][ T29] audit: type=1804 audit(1595470965.268:4826): pid=21530 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir464691444/syzkaller.RbUOvR/3381/memory.events" dev="sda1" ino=16066 res=1 02:22:45 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) socket$inet6_dccp(0xa, 0x6, 0x0) write$tun(r1, &(0x7f0000000140)={@val, @void, @eth={@link_local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4b549f", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}}, 0x4e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socket(0x18, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 02:22:45 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8}]}], {0x14}}, 0x7c}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) accept4$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vxcan1\x00', r3}) listen(r0, 0x0) unshare(0x40000000) accept(r0, 0x0, 0x0) r4 = socket(0x1e, 0x5, 0x5) setsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, &(0x7f0000000080)=0x41c3, 0x4) [ 3109.419894][T21535] netlink: 'syz-executor.2': attribute type 9 has an invalid length. 02:22:45 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a00030b0200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) [ 3109.547664][T21568] IPVS: ftp: loaded support on port[0] = 21 02:22:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x60}}}, 0x24}}, 0x0) [ 3109.781090][T21568] lo speed is unknown, defaulting to 1000 [ 3109.800282][T21579] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 02:22:46 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a00030d0200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) 02:22:46 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8010, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600) preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$IPSET_CMD_RENAME(r7, &(0x7f0000001200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x5, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x3097) mmap(&(0x7f0000891000/0x3000)=nil, 0x3000, 0x2000003, 0x8010, r6, 0x50c32000) [ 3110.226829][T21601] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 3110.334452][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 3110.334463][ T29] audit: type=1804 audit(1595470966.658:4838): pid=21614 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir464691444/syzkaller.RbUOvR/3382/memory.events" dev="sda1" ino=16083 res=1 02:22:46 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8010, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600) preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x32600) sendmsg$IPSET_CMD_RENAME(r7, &(0x7f0000001200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x5, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x3097) mmap(&(0x7f0000891000/0x3000)=nil, 0x3000, 0x2000003, 0x8010, r6, 0x50c32000) 02:22:46 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r1, &(0x7f00000003c0)={@val={0x0, 0x88be}, @void, @eth={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@val={0x9100, 0x4, 0x1, 0x1}, {0x8100, 0x4, 0x1, 0x2}}, {@ipv6={0x86dd, @dccp_packet={0x6, 0x6, "33ba5d", 0x19b, 0x21, 0x1, @loopback, @private1, {[@srh={0x0, 0x4, 0x4, 0x2, 0x8, 0x50, 0x2, [@private2={0xfc, 0x2, [], 0x1}, @loopback]}, @dstopts={0x87, 0x0, [], [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, @dstopts={0x0, 0x1, [], [@padn={0x1, 0x2, [0x0, 0x0]}, @pad1, @enc_lim={0x4, 0x1, 0x7d}]}, @routing={0x87, 0x4, 0x1, 0x7, 0x0, [@empty, @private0={0xfc, 0x0, [], 0x1}]}, @srh={0x2c, 0xc, 0x4, 0x6, 0x8, 0x10, 0x3f, [@empty, @empty, @remote, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @mcast2, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @hopopts={0x2f, 0x3, [], [@hao={0xc9, 0x10, @private2}, @enc_lim={0x4, 0x1, 0x8}, @jumbo={0xc2, 0x4, 0x9}, @enc_lim={0x4, 0x1, 0x20}]}, @fragment={0x2f, 0x0, 0x1f, 0x0, 0x0, 0x1c, 0x64}], {{0x4e21, 0x4e23, 0x4, 0x1, 0x4, 0x0, 0x0, 0x5, 0x0, "2a173a", 0x80, "905b57"}, "11fc6e854178b5fbb773df5ca91c35959bb3851f58d9361e8f22987d18d18efc1c9cb5be4296d0b19082d512c833193c8ec42bce5a5da45eeb17618ded78b65887a40a27f23a801435a838e8221f5241465ec07688288bae95b68b4f90b522ebe3fe0754c91a19c7f6f6c5f51c571fb00b3c153414e576252d3dda"}}}}}}}, 0x1dd) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socket(0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 02:22:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x68}}}, 0x24}}, 0x0) [ 3110.395024][T21618] IPVS: ftp: loaded support on port[0] = 21 [ 3110.495663][ T29] audit: type=1800 audit(1595470966.658:4839): pid=21614 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=16083 res=0 [ 3110.560040][ T29] audit: type=1804 audit(1595470966.698:4840): pid=21614 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir464691444/syzkaller.RbUOvR/3382/memory.events" dev="sda1" ino=16083 res=1 [ 3110.622577][ T29] audit: type=1804 audit(1595470966.798:4841): pid=21622 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir464691444/syzkaller.RbUOvR/3382/memory.events" dev="sda1" ino=16083 res=1 [ 3110.718821][ T29] audit: type=1804 audit(1595470967.038:4842): pid=21638 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir805535454/syzkaller.0DLSKc/4239/memory.events" dev="sda1" ino=15869 res=1 [ 3110.786801][ T29] audit: type=1800 audit(1595470967.038:4843): pid=21638 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=15869 res=0 [ 3110.814683][T21627] __nla_validate_parse: 27 callbacks suppressed [ 3110.814693][T21627] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3110.939979][ T29] audit: type=1804 audit(1595470967.068:4844): pid=21638 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir805535454/syzkaller.0DLSKc/4239/memory.events" dev="sda1" ino=15869 res=1 [ 3111.030185][T21631] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3111.039652][T21568] lo speed is unknown, defaulting to 1000 [ 3111.039728][T21634] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3111.097189][ T29] audit: type=1804 audit(1595470967.158:4845): pid=21641 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir805535454/syzkaller.0DLSKc/4239/memory.events" dev="sda1" ino=15869 res=1 [ 3111.143639][ T29] audit: type=1804 audit(1595470967.308:4846): pid=21610 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir464691444/syzkaller.RbUOvR/3382/cgroup.controllers" dev="sda1" ino=16097 res=1 [ 3111.199568][T21644] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 3111.239030][ T29] audit: type=1804 audit(1595470967.308:4847): pid=21614 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir464691444/syzkaller.RbUOvR/3382/cgroup.controllers" dev="sda1" ino=16097 res=1 02:22:47 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x8b14, &(0x7f0000000040)) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) socket(0x0, 0x0, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xc, 0x2011, r0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8}]}], {0x14}}, 0x7c}}, 0x20040101) getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, &(0x7f0000000140)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000180)=0x2c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r4, 0x0) getsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) socket$caif_stream(0x25, 0x1, 0x0) ioctl$SIOCRSSL2CALL(r4, 0x89e2, &(0x7f0000000040)=@null) 02:22:48 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000000000180c2000000aaaaaaaaaa4086dd604b549f0014060000000000000000000000b1067ea4c80c329700000000000000000000000000aa00000000e7b4278be27bd27febb344010ccb7072d71c4a95396bd9993eb1ecbd30e1ad92c94a50e781ec41ef394ba8486422cc19b3c9ac6fe617ad1bc61ec93735ac081650ea4b2ab2321c12504e8ad3e44cca5c257bccc95a6f394a89b7216b0ee9925002ac752d99ad0f9f72b8e726ec6d0f762ac6f43600"/202, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x4e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socket(0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x64, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x80000}, 0x4800) [ 3111.620315][T21631] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 02:22:48 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000003e00)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a051400000000000000000100000d0900010073797a300000000094000000160a1fffffff000000000000010000000900010073797a30000000000900020073797a32000000006800038054000380140001ff76657468305f746f5f62726964676500140001007465616d5f736c6176655f21000200000000000000617461647605000000000000000000140001007465616d5f736c6176655f30000000000800024000000000080001"], 0xf0}}, 0x0) sendfile(r2, r1, 0x0, 0x100000c1d) [ 3111.742771][T21663] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:22:48 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a00030e0200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) [ 3111.893016][T21694] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 3112.000288][ T266] tipc: TX() has been purged, node left! [ 3112.346419][T21712] netlink: 'syz-executor.2': attribute type 9 has an invalid length. 02:22:49 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a00030e0200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) 02:22:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x6c}}}, 0x24}}, 0x0) 02:22:49 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x8b14, &(0x7f0000000040)) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) socket(0x0, 0x0, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xc, 0x2011, r0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8}]}], {0x14}}, 0x7c}}, 0x20040101) getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, &(0x7f0000000140)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000180)=0x2c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r4, 0x0) getsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) socket$caif_stream(0x25, 0x1, 0x0) ioctl$SIOCRSSL2CALL(r4, 0x89e2, &(0x7f0000000040)=@null) 02:22:49 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a6ec1609d0831e5720b1ad56b6c5820fae00210000000000", 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x0, &(0x7f0000356000)=0x1, 0x36d) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$int_out(r1, 0xfca0, &(0x7f00000000c0)) r2 = accept(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000356000)=0x1, 0x36d) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000100)) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) listen(0xffffffffffffffff, 0x0) accept4$rose(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$rose(0xffffffffffffffff, &(0x7f00000001c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) recvmsg(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001b80)=[{{&(0x7f0000000200)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)}, {&(0x7f0000000280)="d7c4ee3c5ca8abb58eddf0a2ce8f009e55f05216d4c966e4358f07c57c705d50712679ec73111344a69ec2c61d2c8deff0646c0b845c9fb4b6015f19c2c1a6969a18d8c7c0139dd75cb4b5f89f9e5371b9730cf76b1c7cf8284818e32d7e6127e11774ce665645b6d7fbf79189f6c879cae8e1b741abbd39074bd57ba0967329102f09ecc5ed5f4901d30efceed8988bdadc20baa0ed81358f15095fe077cba8f3c07eb5c82ea35bbc949836ba72222cc6a786f3c5313b7030e9fcdcf3da4b53b02f8677378349a96de67d8676e89b6131abb40c80948cc6fb6e109e9ba89435", 0xe0}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000000380)="a613fa5a717d13e23cfca94d20c6e1f16343ea8715a6b2e971d331b7e4e1d935dc9f90c7ffd15207daeae5ea7ba0f36f2fa92d7f2e38572c8225f5eb25e605a01df31eefd4e794cf52e9cdcda55e675d9adbebdff4", 0x55}], 0x4, &(0x7f0000001480)=[@ip_retopts={{0x34, 0x0, 0x7, {[@end, @ra={0x94, 0x4}, @end, @end, @noop, @generic={0x88, 0x9, "92ff7cb39d41c4"}, @ssrr={0x89, 0x7, 0xb1, [@private=0xa010100]}, @generic={0x82, 0xb, "100df27256c3ceb30c"}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_retopts={{0x9c, 0x0, 0x7, {[@ra={0x94, 0x4}, @rr={0x7, 0xb, 0xcf, [@rand_addr=0x64010100, @multicast1]}, @noop, @timestamp_prespec={0x44, 0x24, 0xa, 0x3, 0x5, [{@private=0xa010100}, {@loopback, 0xffffffff}, {@remote, 0x2}, {@loopback, 0x6}]}, @generic={0x44, 0x8, "9c9f846f2a4b"}, @end, @timestamp_prespec={0x44, 0x4c, 0x5f, 0x3, 0xe, [{@remote, 0x8001}, {@loopback, 0x8}, {@rand_addr=0x64010102, 0x7fffffff}, {@loopback, 0x7}, {@remote, 0x9}, {@multicast2, 0xfffffff9}, {@broadcast, 0x865}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x1}, {@multicast1, 0xffffffff}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6a5b}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xd3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x150}}, {{&(0x7f0000001600)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000001740)=[{&(0x7f0000001640)="8cbd910f6f617ad3a68696d63e0352673dfb460e5be90ed97696b71abd7b4a2a5e2cecbac448569bcbb72c781431a75cc0a292adcbcfa5d92121cdf065650f52317c1ef3eb13d35eda", 0x49}, {&(0x7f00000016c0)="51e9a4807d53d30468ce4ae3217648b246f894668241029ceb6a7177d1e6e91bdd59f615240d048fb08a58521e0931ded1f239c260748bf156a7ebde5c569f193661dc61027a59b1f7070387d37e7aa2075d05ef08b05c8c870b6fbd4df662", 0x5f}], 0x2, &(0x7f0000001ac0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x89, 0x2}]}}}, @ip_tos_int={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3f}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010102, @loopback}}}], 0xa0}}], 0x2, 0x8890) 02:22:49 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a00030f0200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) 02:22:49 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r1, &(0x7f0000000140)={@val, @void, @eth={@link_local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4b549f", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}}, 0x4e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) r5 = socket(0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) bind$rxrpc(r5, &(0x7f00000000c0)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e22, @loopback}}, 0x24) [ 3113.603393][T21723] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3113.626079][T21727] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 3113.700286][T21729] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3114.080324][T21742] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3114.198087][T21735] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 3114.246491][T21723] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 02:22:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r5, &(0x7f0000000100)=ANY=[], 0xfffffe3e) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x9c, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x70, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x8}, {0x44, 0x5, [{0x3, 0x3f, 0x1, 0x5}, {0x8, 0x5, 0x1, 0x8000}, {0x6, 0xf1, 0x1, 0x1}, {0x2, 0x9, 0x7f, 0x7}, {0x1, 0x20, 0x3, 0x1}, {0x2f12, 0xff, 0x5f, 0x8000}, {0x100, 0x7d, 0x1, 0x5}, {0x1, 0x8, 0x20, 0xfffe}]}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x4}, @TCA_BPF_CLASSID={0x8, 0x3, {0xe, 0xfff2}}, @TCA_BPF_FD={0x8, 0x6, r5}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff2, 0xffe0}}]}}]}, 0x9c}}, 0x0) [ 3114.640847][T21742] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:22:51 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r1, &(0x7f0000000140)={@val, @void, @eth={@link_local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4b549f", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}}, 0x4e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socket(0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=[@iv={0x0, 0x117, 0x2, 0x0, "15dc91768c78ba00960b7a5e4e7907526d7c7c8aee968a562b00cb905e1826a8f9ee0ac480576a7134801fc070041984c5c23fa0f93b59075853f70545ce9c61b15ff65cde5078b4209217f0220f0810f739bd470d405272edb16434a11869d08d8fef065de94710ee553b410c3c02a96c156836af8d11c4af4a77e766f9ed8ec43830fe02bb22babf9b41d4e5027b49ba3f720465bf4ee9b63892030f4fea97d94bc6cd1a7d4d6869cb3185e5da3ca0da"}, @op, @assoc, @assoc, @op, @op]}], 0x4924924924924b3, 0x0) getsockopt$packet_buf(r5, 0x107, 0x2, &(0x7f00000001c0)=""/199, &(0x7f00000000c0)=0xc7) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) [ 3114.719845][T21727] netlink: 'syz-executor.2': attribute type 9 has an invalid length. 02:22:51 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a00030e0200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) 02:22:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x74}}}, 0x24}}, 0x0) 02:22:51 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a6ec1609d0831e5720b1ad56b6c5820fae00210000000000", 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x0, &(0x7f0000356000)=0x1, 0x36d) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$int_out(r1, 0xfca0, &(0x7f00000000c0)) r2 = accept(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000356000)=0x1, 0x36d) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000100)) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) listen(0xffffffffffffffff, 0x0) accept4$rose(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$rose(0xffffffffffffffff, &(0x7f00000001c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) recvmsg(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001b80)=[{{&(0x7f0000000200)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)}, {&(0x7f0000000280)="d7c4ee3c5ca8abb58eddf0a2ce8f009e55f05216d4c966e4358f07c57c705d50712679ec73111344a69ec2c61d2c8deff0646c0b845c9fb4b6015f19c2c1a6969a18d8c7c0139dd75cb4b5f89f9e5371b9730cf76b1c7cf8284818e32d7e6127e11774ce665645b6d7fbf79189f6c879cae8e1b741abbd39074bd57ba0967329102f09ecc5ed5f4901d30efceed8988bdadc20baa0ed81358f15095fe077cba8f3c07eb5c82ea35bbc949836ba72222cc6a786f3c5313b7030e9fcdcf3da4b53b02f8677378349a96de67d8676e89b6131abb40c80948cc6fb6e109e9ba89435", 0xe0}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000000380)="a613fa5a717d13e23cfca94d20c6e1f16343ea8715a6b2e971d331b7e4e1d935dc9f90c7ffd15207daeae5ea7ba0f36f2fa92d7f2e38572c8225f5eb25e605a01df31eefd4e794cf52e9cdcda55e675d9adbebdff4", 0x55}], 0x4, &(0x7f0000001480)=[@ip_retopts={{0x34, 0x0, 0x7, {[@end, @ra={0x94, 0x4}, @end, @end, @noop, @generic={0x88, 0x9, "92ff7cb39d41c4"}, @ssrr={0x89, 0x7, 0xb1, [@private=0xa010100]}, @generic={0x82, 0xb, "100df27256c3ceb30c"}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_retopts={{0x9c, 0x0, 0x7, {[@ra={0x94, 0x4}, @rr={0x7, 0xb, 0xcf, [@rand_addr=0x64010100, @multicast1]}, @noop, @timestamp_prespec={0x44, 0x24, 0xa, 0x3, 0x5, [{@private=0xa010100}, {@loopback, 0xffffffff}, {@remote, 0x2}, {@loopback, 0x6}]}, @generic={0x44, 0x8, "9c9f846f2a4b"}, @end, @timestamp_prespec={0x44, 0x4c, 0x5f, 0x3, 0xe, [{@remote, 0x8001}, {@loopback, 0x8}, {@rand_addr=0x64010102, 0x7fffffff}, {@loopback, 0x7}, {@remote, 0x9}, {@multicast2, 0xfffffff9}, {@broadcast, 0x865}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x1}, {@multicast1, 0xffffffff}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6a5b}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xd3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x150}}, {{&(0x7f0000001600)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000001740)=[{&(0x7f0000001640)="8cbd910f6f617ad3a68696d63e0352673dfb460e5be90ed97696b71abd7b4a2a5e2cecbac448569bcbb72c781431a75cc0a292adcbcfa5d92121cdf065650f52317c1ef3eb13d35eda", 0x49}, {&(0x7f00000016c0)="51e9a4807d53d30468ce4ae3217648b246f894668241029ceb6a7177d1e6e91bdd59f615240d048fb08a58521e0931ded1f239c260748bf156a7ebde5c569f193661dc61027a59b1f7070387d37e7aa2075d05ef08b05c8c870b6fbd4df662", 0x5f}], 0x2, &(0x7f0000001ac0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x89, 0x2}]}}}, @ip_tos_int={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3f}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010102, @loopback}}}], 0xa0}}], 0x2, 0x8890) [ 3115.190011][T21789] netlink: 'syz-executor.4': attribute type 9 has an invalid length. 02:22:51 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003100200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) 02:22:51 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cgroup.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) getsockopt(0xffffffffffffffff, 0x114, 0x8, 0x0, &(0x7f00000002c0)) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000100)={0xff, 0x5}, 0x2) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x7f}, @ETHTOOL_A_LINKINFO_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x8}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x1}]}, 0x58}}, 0x24008045) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="000000009576a4e30e45eb52148f138bb1466ae648c7b1cc4a6b9ce01da61660e7f26ab18ef3ae13b6f573e1fe88abc01162863481a7dff6de76966cb065b0551c7cdb707e6054a18b24e98967c26ef2856ffc7aaca7c8d9547accf6aaf02c14f96347555e389496d5992563fca5f579a2138e839601fd373f635f982451ec03de06fe5019ba7337bdcd60368a024e3f13bb9162f6b805", @ANYRES16=r3, @ANYBLOB="01002bbd700000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572300000"], 0x38}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="20002bbd7000fedbdf250100"/46], 0x34}}, 0x8040) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x38, 0x3e9, 0xb21, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x5, 0x3ff, 0x1ff, 0x3, 0x0, 0xfffffff7}, ["", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xffff}) getsockopt(0xffffffffffffffff, 0x114, 0x3b9e, 0x0, &(0x7f00000000c0)) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000100)={0xff, 0x5}, 0x2) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000280)) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 02:22:52 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r1, &(0x7f0000000140)={@val, @void, @eth={@link_local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4b549f", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}}, 0x4e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socket(0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f00000000c0)={'veth0_macvtap\x00', {0x2, 0x4e22, @broadcast}}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) [ 3115.689906][T21817] netlink: 'syz-executor.2': attribute type 9 has an invalid length. 02:22:52 executing program 4: r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=[@iv={0x0, 0x117, 0x2, 0x0, "15dc91768c78ba00960b7a5e4e7907526d7c7c8aee968a562b00cb905e1826a8f9ee0ac480576a7134801fc070041984c5c23fa0f93b59075853f70545ce9c61b15ff65cde5078b4209217f0220f0810f739bd470d405272edb16434a11869d08d8fef065de94710ee553b410c3c02a96c156836af8d11c4af4a77e766f9ed8ec43830fe02bb22babf9b41d4e5027b49ba3f720465bf4ee9b63892030f4fea97d94bc6cd1a7d4d6869cb3185e5da3ca0da"}, @op, @assoc, @assoc, @op, @op]}], 0x4924924924924b3, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, &(0x7f0000000040)=0x14) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)={0x2, 0xe, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x1a}]}, 0x28}}, 0x0) 02:22:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x7a}}}, 0x24}}, 0x0) 02:22:52 executing program 4: mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=[@iv={0x0, 0x117, 0x2, 0x0, "15dc91768c78ba00960b7a5e4e7907526d7c7c8aee968a562b00cb905e1826a8f9ee0ac480576a7134801fc070041984c5c23fa0f93b59075853f70545ce9c61b15ff65cde5078b4209217f0220f0810f739bd470d405272edb16434a11869d08d8fef065de94710ee553b410c3c02a96c156836af8d11c4af4a77e766f9ed8ec43830fe02bb22babf9b41d4e5027b49ba3f720465bf4ee9b63892030f4fea97d94bc6cd1a7d4d6869cb3185e5da3ca0da"}, @op, @assoc, @assoc, @op, @op]}], 0x4924924924924b3, 0x0) sendmsg$AUDIT_GET(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3e8, 0x622, 0x70bd2d, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80000000}) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) [ 3116.047577][T21849] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 3116.179632][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 3116.179647][ T29] audit: type=1804 audit(1595470972.498:4850): pid=21855 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir251561709/syzkaller.UZqFTe/3895/memory.events" dev="sda1" ino=15746 res=1 02:22:52 executing program 3: syz_emit_ethernet(0x1d1, &(0x7f00000004c0)={@local, @empty, @void, {@mpls_mc={0x8848, {[{0x12ca}, {0x4, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x3ff, 0x0, 0x1}, {0x20, 0x0, 0x1}, {0x708}, {0x2}], @ipv6=@dccp_packet={0x0, 0x6, "9a92e4", 0x17b, 0x21, 0x0, @private1, @private1, {[@srh={0x1, 0xc, 0x4, 0x6, 0x9, 0x60, 0x6, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, @private0={0xfc, 0x0, [], 0x1}, @mcast2, @private0, @dev={0xfe, 0x80, [], 0x28}]}, @fragment={0x2b, 0x0, 0xff, 0x0, 0x0, 0x5, 0x68}, @dstopts={0x1}, @fragment={0x4, 0x0, 0x3, 0x1, 0x0, 0x5, 0x64}], {{0x4e20, 0x4e22, 0x4, 0x1, 0x7, 0x0, 0x0, 0x8, 0x1, "fed21b", 0x5b, '.BI'}, "18f1fb75a775c77d8986dd1a954a482bdc3774afa5f3565c7bce94913b162042d00f4f7e3c2610e2375317092da888bb1d16ed58a92c57352b63db5b8a703790020cd0d4bbba40073bcf990efa037d258ffc30eee9e8d18bc5c35911201ea28b153b622d0e043c20a0ecf5e9e58cdb1884df6db1441749dab291533826c86d6ee7faa131a8c5960630a39eea0d2b8b0ef1c4cf7e1afbe00388c0a918961ce98c285ea6221180ae052bfc641f1a2637b62df8dc1851a6da0c156c0f98461a547e0cde47bf664fb0a235f610a730638d05a950149c31367e05881e8788d717783fe959dae15c66bd27c47ffe"}}}}}}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000ecffff3f002800120009000100766574682097531f191c26dd20e7cbc1fe6ab1167faabcd728f1d1308dd02abf9b4302460408a593cab45bc753b9f25b17233ad1fb3440736d3b83035ae9a14fd472d50703cb5c1c149d41c43f"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl0\x00', r2, 0x4, 0x7, 0x0, 0x9, 0x0, @private2, @private1={0xfc, 0x1, [], 0x1}, 0x700, 0x10, 0x18, 0xff}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x17, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000063010400000000009500000000000000556b39a7c0a0"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [0x61], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={r4, 0xfd, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x1a, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000024eaff0ff2a4d129e62b2c18850c5c7cb99877460474f3f47dd3a081ba9d8f470c09c0d22477fe43dc05a69a58b33247639e5c0b81ab97187fc4077f56ab7379ce6cadfb9373ba97170f92ebb35915c433cbb96defbb032e92621f0638e551101666fd4fcd41cbc1d35133cfc9e2e486a82187587280218be365d33090"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5, r4}, 0x74) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r5, 0x4) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=r5, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000300)={0x19, 0x3, 0x2, 0xfffffffa, 0x40, 0xffffffffffffffff, 0x1367, [], r3, r6, 0x0, 0x2}, 0x40) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockopt$inet6_opts(r7, 0x29, 0x36, &(0x7f0000000000)=""/231, &(0x7f0000000100)=0xe7) [ 3116.282137][ T29] audit: type=1800 audit(1595470972.498:4851): pid=21855 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=15746 res=0 02:22:52 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000000000000170100000200000000000027da8a92b68e23f100960b7a5e4e7907526d7c7c8aee968a562b00cb905e1826a8f9ee0ac480576a7334801fc070041984c5c23fa0f93b59075853f70545ce9c61b15ff65cde5078b4209217f0220f0810f739bd470def2e34405272edb16434a11869d08d8fef065de94710ee553b410c3c02a96c156836af8d11c4af4a77e766f9ed8ec43830fe02bb22babf9b41d4e5027b49ba3f720465bf4ee9b63892030f4fea97d94bc6cd1a7d4d6869cb3185e5da3ca0da000000000000000000000017010000030000000000000000000000000000000000000017010000040000000000000000000000000000000000000017010000040000000000000000000000000000000000000017010000030000000000000000000000000000000000000017010000030000000000000000000000f1d289004eb0890463383a11ab6db81d4743201d6df48bdccd5ad29b4c42f802da9e83"]}], 0x4924924924924b3, 0x0) r1 = accept$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, &(0x7f0000000080)=0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000480)=0x5, 0x4) sendmsg$NFT_BATCH(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8}]}], {0x14}}, 0x7c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="74000000020604010000000000000000000000020900020073797a3100000000540007800500140004000000080009400000000a1800018014000240fc010000000000000000000000000000060005404e24000008001240fffffffe0800124000000000080008400000008805001500040000008e469e6ba5491f02e1b2f2a0aaac0f820990ec753ea4"], 0x74}, 0x1, 0x0, 0x0, 0x24008085}, 0x4000) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f00000004c0)={0x4000, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e20, @rand_addr=0x64010101}}}, 0x108) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r3 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r3, 0x29, 0x1, &(0x7f0000000000), 0x4) [ 3116.378726][ T29] audit: type=1804 audit(1595470972.508:4852): pid=21855 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir251561709/syzkaller.UZqFTe/3895/memory.events" dev="sda1" ino=15746 res=1 [ 3116.484312][ T29] audit: type=1800 audit(1595470972.768:4853): pid=21855 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=15746 res=0 [ 3116.521635][ T29] audit: type=1804 audit(1595470972.768:4854): pid=21855 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir251561709/syzkaller.UZqFTe/3895/memory.events" dev="sda1" ino=15746 res=1 02:22:53 executing program 4: mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=[@iv={0x0, 0x117, 0x2, 0x0, "15dc91768c78ba00960b7a5e4e7907526d7c7c8aee968a562b00cb905e1826a8f9ee0ac480576a7134801fc070041984c5c23fa0f93b59075853f70545ce9c61b15ff65cde5078b4209217f0220f0810f739bd470d405272edb16434a11869d08d8fef065de94710ee553b410c3c02a96c156836af8d11c4af4a77e766f9ed8ec43830fe02bb22babf9b41d4e5027b49ba3f720465bf4ee9b63892030f4fea97d94bc6cd1a7d4d6869cb3185e5da3ca0da"}, @op, @assoc, @assoc, @op, @op]}], 0x4924924924924b3, 0x0) sendmsg$AUDIT_GET(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3e8, 0x622, 0x70bd2d, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80000000}) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) [ 3116.645098][T21857] __nla_validate_parse: 5 callbacks suppressed [ 3116.645109][T21857] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3116.728878][T21859] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3116.759379][ T29] audit: type=1804 audit(1595470973.078:4855): pid=21875 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir251561709/syzkaller.UZqFTe/3896/memory.events" dev="sda1" ino=15829 res=1 [ 3116.783790][T21862] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3116.810152][T21861] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3116.845654][ T29] audit: type=1800 audit(1595470973.078:4856): pid=21875 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=15829 res=0 02:22:53 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000000180c2000000aaaaaaaaaaaa86dd604b549f0014060000000000000000000000000000000000fe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"/280], 0x4e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socket(0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) [ 3116.892107][T21863] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 02:22:53 executing program 1: mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=[@iv={0x0, 0x117, 0x2, 0x0, "15dc91768c78ba00960b7a5e4e7907526d7c7c8aee968a562b00cb905e1826a8f9ee0ac480576a7134801fc070041984c5c23fa0f93b59075853f70545ce9c61b15ff65cde5078b4209217f0220f0810f739bd470d405272edb16434a11869d08d8fef065de94710ee553b410c3c02a96c156836af8d11c4af4a77e766f9ed8ec43830fe02bb22babf9b41d4e5027b49ba3f720465bf4ee9b63892030f4fea97d94bc6cd1a7d4d6869cb3185e5da3ca0da"}, @op, @assoc, @assoc, @op, @op]}], 0x4924924924924b3, 0x0) sendmsg$AUDIT_GET(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3e8, 0x622, 0x70bd2d, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80000000}) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) 02:22:53 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003110200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) [ 3116.964290][T21857] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3116.974032][ T29] audit: type=1804 audit(1595470973.088:4857): pid=21875 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir251561709/syzkaller.UZqFTe/3896/memory.events" dev="sda1" ino=15829 res=1 02:22:53 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0xfffffffffffffe39, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007948008000000b000500010007"], 0x1}}, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) [ 3117.106689][ T29] audit: type=1804 audit(1595470973.428:4858): pid=21893 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir805535454/syzkaller.0DLSKc/4244/memory.events" dev="sda1" ino=15749 res=1 [ 3117.107178][T21896] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 3117.189646][T21861] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3117.265566][ T29] audit: type=1800 audit(1595470973.428:4859): pid=21893 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=15749 res=0 [ 3117.319528][T21903] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 02:22:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xf0}}}, 0x24}}, 0x0) 02:22:54 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000002f80)={0x0, @multicast2, @multicast1}, &(0x7f0000002fc0)=0xc) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000038c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003880)={&(0x7f0000003000)={0x844, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xc8c}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x100}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x3ff}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0xfffffff9}}}]}}, {{0x8}, {0x260, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x8357}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x19}}}, {0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x3c, 0x4, [{0x401, 0x3, 0xa7}, {0x7f, 0x3, 0x20, 0x4af}, {0xed2f, 0x9, 0x0, 0x6b8}, {0xfc00, 0x3, 0x5, 0xf63e}, {0xffff, 0x7, 0x40, 0x1}, {0xc6d, 0x42, 0x6, 0x40000000}, {0x800, 0x81}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r5}}}]}}]}, 0x844}, 0x1, 0x0, 0x0, 0xc0}, 0x5268dca74fa395bb) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9, 0x1, 'xfrm\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x2}]}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x0) shutdown(0xffffffffffffffff, 0x0) 02:22:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=[@iv={0x0, 0x117, 0x2, 0x0, "15dc91768c78ba00960b7a5e4e7907526d7c7c8aee968a562b00cb905e1826a8f9ee0ac480576a7134801fc070041984c5c23fa0f93b59075853f70545ce9c61b15ff65cde5078b4209217f0220f0810f739bd470d405272edb16434a11869d08d8fef065de94710ee553b410c3c02a96c156836af8d11c4af4a77e766f9ed8ec43830fe02bb22babf9b41d4e5027b49ba3f720465bf4ee9b63892030f4fea97d94bc6cd1a7d4d6869cb3185e5da3ca0da"}, @op, @assoc, @assoc, @op, @op]}], 0x4924924924924b3, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f00000000c0)=0x2cf2, 0x4) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') recvmmsg(r2, &(0x7f0000004d80)=[{{0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x500, 0x500}}], 0xf, 0xbc0e, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000340)=ANY=[], 0x18}}, 0x20040000) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="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"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=@gettaction={0x160, 0x32, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1ff}}, {0x14, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x70, 0x1, [{0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x14, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff4eab}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x2}, @action_gd=@TCA_ACT_TAB={0x70, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x160}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001280)={'ip6tnl0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000001380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x5c, r3, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2404a040}, 0x4000841) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x3c, 0x0, 0x2, 0x70bd22, 0x0, {}, [@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, "d293f9b972eed232b76fdcd03549c6e594e75e43ab245c7b0a1fb46c4b4688a20fd064f7"}]}, 0x3c}}, 0x1) 02:22:54 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d000d00ea1100000005000000", 0x29}], 0x1) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@getnetconf={0x14, 0x52, 0x100, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) [ 3117.762701][T21920] IPVS: ftp: loaded support on port[0] = 21 [ 3117.859580][T21915] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3117.876890][T21925] IPVS: ftp: loaded support on port[0] = 21 [ 3117.982044][T21916] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3118.051140][T21920] lo speed is unknown, defaulting to 1000 [ 3118.058868][T21931] netlink: 'syz-executor.2': attribute type 9 has an invalid length. 02:22:54 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r1, &(0x7f0000000140)={@val, @void, @eth={@link_local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4b549f", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}}, 0x4e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) r5 = socket(0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000240)=@raw={'raw\x00', 0x9, 0x3, 0x230, 0x0, 0xffffffff, 0xffffffff, 0xc0, 0xffffffff, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x3, &(0x7f0000000200), {[{{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x11, 0x1, 0x3, 0x0, 'netbios-ns\x00', 'syz0\x00', {0x7cc3}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x290) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x43, &(0x7f00000000c0)={'HL\x00'}, &(0x7f00000001c0)=0x1e) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 02:22:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x204}}}, 0x24}}, 0x0) [ 3118.522447][T21925] lo speed is unknown, defaulting to 1000 [ 3118.522469][T21920] lo speed is unknown, defaulting to 1000 [ 3118.540542][T21930] netlink: 'syz-executor.4': attribute type 13 has an invalid length. 02:22:54 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003120200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) [ 3118.597675][T21921] IPVS: ftp: loaded support on port[0] = 21 [ 3118.677711][T21930] IPVS: ftp: loaded support on port[0] = 21 [ 3118.784521][T21993] netlink: 'syz-executor.2': attribute type 9 has an invalid length. 02:22:55 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=[@iv={0x0, 0x117, 0x2, 0x0, "15dc91768c78ba00960b7a5e4e7907526d7c7c8aee968a562b00cb905e1826a8f9ee0ac480576a7134801fc070041984c5c23fa0f93b59075853f70545ce9c61b15ff65cde5078b4209217f0220f0810f739bd470d405272edb16434a11869d08d8fef065de94710ee553b410c3c02a96c156836af8d11c4af4a77e766f9ed8ec43830fe02bb22babf9b41d4e5027b49ba3f720465bf4ee9b63892030f4fea97d94bc6cd1a7d4d6869cb3185e5da3ca0da"}, @op, @assoc, @assoc, @op, @op]}], 0x4924924924924b3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0xe000000, &(0x7f0000000180)=[{&(0x7f0000000000)="2e000000120081aee4520cecff0e00fa078b5bdb4cb904e473730e55cff26d1b0e001d80040000005e510befccd7", 0x2e}], 0x1}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x10, &(0x7f0000000300)={r5}, &(0x7f0000000140)=0x14) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000240)=r6) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f00000000c0)={r5, 0xd0e}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e23, 0x1, @local, 0x3c5c}}, 0x7ff, 0x9, 0x2, 0x100, 0x8, 0xffff, 0x8}, 0x9c) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv4_newroute={0x2c, 0x18, 0x109, 0x70bd2b, 0x0, {0x2, 0x20, 0x0, 0x2, 0xff, 0x0, 0x0, 0x7}, [@RTA_DST={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @RTA_PRIORITY={0x8, 0x6, 0x7}]}, 0x2c}}, 0x0) [ 3118.954153][T22018] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 3119.284385][T22018] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 3119.314405][T21921] lo speed is unknown, defaulting to 1000 [ 3119.320695][T21925] lo speed is unknown, defaulting to 1000 02:22:55 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x0, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="020100021000000000000600000000000800120000ffff00000000000000000006000000000000000000800000000000e00000010b00000000000000000035000000000000000000000000ff00000000030006000000000002000004000000bb000000000000000003000500000000000200423b000000000000004000000000"], 0x80}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmmsg(r4, &(0x7f0000000180), 0x400000000000117, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r1, &(0x7f0000000140)={@val, @void, @eth={@link_local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4b549f", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}}, 0x4e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socket(0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) [ 3119.340559][T21993] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 3119.345553][T22031] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 3119.444341][T26272] tipc: TX() has been purged, node left! 02:22:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x300}}}, 0x24}}, 0x0) [ 3119.767570][T22031] netlink: 'syz-executor.1': attribute type 29 has an invalid length. 02:22:56 executing program 1: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xe000000, &(0x7f0000000180)=[{&(0x7f0000000000)="2e000000120081aee4520cecff0e00fa078b5bdb4cb904e473730e55cff26d1b0e001d80040000005e510befccd7", 0x2e}], 0x1}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e24, @multicast1}]}, &(0x7f0000000180)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x10, &(0x7f0000000300)={r2}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={r2, 0xd0e}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={r2, 0x20}, &(0x7f0000000080)=0x8) r3 = socket(0x11, 0x800000003, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000000)) socket$inet6(0xa, 0x80003, 0x7) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000280)={0x28, 0x0, 0x0, @my=0x0}, 0x10) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000200), 0x8) [ 3119.886758][T21921] lo speed is unknown, defaulting to 1000 [ 3119.889961][T21930] lo speed is unknown, defaulting to 1000 02:22:56 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003130200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) [ 3120.005451][T22086] IPVS: ftp: loaded support on port[0] = 21 [ 3120.027710][T22098] netlink: 'syz-executor.2': attribute type 9 has an invalid length. 02:22:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x402}}}, 0x24}}, 0x0) [ 3120.674880][T21930] lo speed is unknown, defaulting to 1000 [ 3120.674910][T22086] lo speed is unknown, defaulting to 1000 [ 3120.797034][T22103] IPVS: ftp: loaded support on port[0] = 21 [ 3121.021119][T22086] lo speed is unknown, defaulting to 1000 [ 3121.042519][T22103] lo speed is unknown, defaulting to 1000 [ 3121.459963][T22103] lo speed is unknown, defaulting to 1000 02:23:01 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003120200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) 02:23:01 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000000000180c2000000aaaaaaaaaaaa86dd604b549f0014060000000000000000000000000000000000fe8000000000000000000010000000aa00000000af2a0290a5a25ecbce6f93cabbe94906724747b7b8b96e8294676705b01c57a2fe3d84402f54092b09bcae418099aa1b4f2d293c70c9810e5ea5afb18c6cfc429d2ad583e7af4593aaa8c2b428b0fb37f0123339c81b63f8e5953235d301c772bc26972e806543538517417bd588caf62ffeecf9aee5a6820f341f", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x4e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socket(0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_delrule={0x24, 0x21, 0x100, 0x70bd2b, 0x25dfdbfd, {0x2, 0x0, 0x20, 0x1, 0x9f, 0x0, 0x0, 0x3, 0x10000}, [@FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) [ 3124.844803][T22240] validate_nla: 1 callbacks suppressed [ 3124.844813][T22240] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 02:23:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x500}}}, 0x24}}, 0x0) 02:23:01 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003160200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) 02:23:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x20000010) socketpair(0x3, 0x1, 0x77, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x25, 0x2, 0x1, &(0x7f0000000300)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x90}, 0x1, 0x0, 0x0, 0x20000880}, 0x800) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000340)=@get={0x1, &(0x7f0000000440)=""/219, 0x5}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$int_out(0xffffffffffffffff, 0x2, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000140), &(0x7f00000002c0)=0x4) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x65c15bf2) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c) accept$nfc_llcp(r2, &(0x7f0000000200), &(0x7f0000000280)=0x60) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000380), 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x8, 0x8001, 0xf11, 0x4, 0xffffff01}, 0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0xe800, &(0x7f0000000400)={&(0x7f0000000580)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x24000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9, 0x1, 'xfrm\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) 02:23:01 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @loopback}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, 'vxcan1\x00'}) syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') 02:23:01 executing program 4: getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="00280012000000eb2676657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r0, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="386a9fbef9ef65740fbb2b6e7936000008000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x88, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r0}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_virt_wifi\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'bridge_slave_0\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_to_batadv\x00'}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000004540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@enum, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x2, [{0x0, 0x2, 0x1ff}]}]}}, &(0x7f0000004600)=""/210, 0x4a, 0xd2, 0x8}, 0x20) [ 3125.503710][T22257] __nla_validate_parse: 22 callbacks suppressed [ 3125.503721][T22257] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3125.521295][ T266] tipc: TX() has been purged, node left! [ 3125.540228][T22261] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 3125.598131][T22262] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3125.657604][T22279] BPF: (anon) type_id=2 bitfield_size=0 bits_offset=511 [ 3125.669097][T22264] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3125.695583][T22279] BPF: 02:23:02 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f0000000140)={@val, @void, @eth={@link_local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4b549f", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}}, 0x4e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socket(0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) [ 3125.700081][T22274] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3125.700370][T22279] BPF:Member bits_offset exceeds its struct size [ 3125.742935][T22279] BPF: [ 3125.742935][T22279] [ 3125.765363][T22275] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3125.828914][T22276] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 3125.861258][T22276] team0: Device xfrm1 is of different type [ 3126.075339][T22286] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 02:23:02 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x44}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e23, 0x909, @mcast1, 0x7fff}}, [0x30000000, 0xfffffffffffffffe, 0x685, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags=0xd0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000100001000000000000c431fecd0991e358f0c30522fe0000000000000a5c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000f0800064000000000080007400000000008000640ffffff00140000001100013e9a4fa4da3e54fd0aab8920ac8c870d29df084c053440d4c61f50"], 0x84}}, 0x0) r6 = accept4(r5, &(0x7f0000000280)=@isdn, &(0x7f0000000300)=0x80, 0x80800) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000340)={r1, 0x7}, &(0x7f0000000380)=0x8) r7 = socket$inet(0x2, 0x5, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x84, 0xb, 0x0, 0x84) sendfile(r2, r7, &(0x7f0000000100)=0x7, 0x3fe000) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r3, r2, 0x0, 0x8000000000004) sendmsg$NFNL_MSG_ACCT_GET(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x4c, 0x1, 0x7, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x625f2901}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) [ 3126.128486][T22261] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 3126.137039][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 3126.137051][ T29] audit: type=1800 audit(1595470982.458:4862): pid=22259 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="cgroup.controllers" dev="sda1" ino=15961 res=0 [ 3126.184135][T22257] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3126.259982][T22275] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3126.297616][T22310] IPVS: ftp: loaded support on port[0] = 21 02:23:02 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001800000000029f000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010067656e657665000004000280"], 0x34}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=[@iv={0x0, 0x117, 0x2, 0x0, "15dc91768c78ba00960b7a5e4e7907526d7c7c8aee968a562b00cb905e1826a8f9ee0ac480576a7134801fc070041984c5c23fa0f93b59075853f70545ce9c61b15ff65cde5078b4209217f0220f0810f739bd470d405272edb16434a11869d08d8fef065de94710ee553b410c3c02a96c156836af8d11c4af4a77e766f9ed8ec43830fe02bb22babf9b41d4e5027b49ba3f720465bf4ee9b63892030f4fea97d94bc6cd1a7d4d6869cb3185e5da3ca0da"}, @op, @assoc, @assoc, @op, @op]}], 0x4924924924924b3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8}]}], {0x14}}, 0x7c}}, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r5, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, 0x0, 0xb, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_COMPAT_NAME={0xb, 0x1, '[.,$-.\x00'}, @NFTA_COMPAT_NAME={0xb, 0x1, 'geneve\x00'}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0xa, 0x1, '&\x8f]$$\x00'}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000850}, 0x8891) sendto$rxrpc(r4, &(0x7f0000000140)="ef63f1bb2e0f4b3b0ef1c8c7749e2d2a99306621595d8fa1436d21dff9ac3b6e8b22d155448c2eb98054ed1bb1895716fb13f7e612c879c89dbde1af4b5e83d687c13fd6a0e89dc00cec7b01dd6fe162f5729b08f73bf30d196b246ef4024856be", 0x61, 0x80000, &(0x7f00000001c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7}}, 0x24) socket(0x26, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000300)={r7}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={r7, 0xd0e}, &(0x7f0000000100)=0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000003880)=[{&(0x7f0000000400)=@in6={0xa, 0x4e24, 0x5, @private0={0xfc, 0x0, [], 0x1}}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000440)="7aec5cd7b00a243f87fe4295d701b8748a87f33e24d007888727c055dc8b476c158b3df84f4f42db619a60f4a84f2f88cfc33e37cf03e92f4ef9be", 0x3b}, {&(0x7f0000000c80)="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", 0x1000}, {&(0x7f0000000480)="0de9f5e7b64cf98dc46f8b182798674058fc648c952aada6c40fcd7ef8a9abfc9e577128cccd030bd1ccb359f87403c896a04e87bceeb159be217235dab41a95cb88678ef986566f3e1e104265139f85e380c237f2ab0c0ff9fa5215a65d806e753cc1b448968c4ad8", 0x69}], 0x3, &(0x7f0000000540)=[@sndrcv={0x30, 0x84, 0x1, {0x81, 0x8001, 0x205, 0x67c, 0x8, 0x1, 0x1, 0x200}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x2}}], 0x48, 0x4000000}, {&(0x7f0000000700)=@in={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000740)="dfa91c9b88b74c7d56a83f33e0af88f12b2cada9a26746", 0x17}, {&(0x7f0000000780)="23d5cbdb508d56220e2240c046107e30a9a7bbbdb1cfb58722c41ead5146c908c0733af719d3203dfdf242f2a3964c5f5184d5c8d5a8652767a777958a41cbf6c0e1a059a772f950fdf1e5fc2dfe65b5d3a96ab97bd6e9ba4960ceba2d1e25c4f161364a3f83a7d7a23eacfbcb58d9cfa1b7a474ebf989faeda936f7b3e3f67b9312", 0x82}, {&(0x7f0000000840)="be3c6fba09f19348c697b30cd1727f59db9565bb7d", 0x15}], 0x3, 0x0, 0x0, 0x8000040}, {&(0x7f00000008c0)=@in6={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, 0x1c, &(0x7f0000001f00)=[{&(0x7f0000000900)="8757d33dae958988b050fafc401b462a571d229803a85eb4e26a96dcfd60e4aeaeef4386b1b1c0874e86bb92daa15a3216e09bfc7f2be9ae8644a5102cd7ab4dd6feda7d909ec028d73ab25495aff76a219694883386743ddb7eefdaa315019eca0d186308c162794d9173c7601c808d298136c85bf6de735c4a77d318d94b4f0c97c8842c98d2cc562139bd4692c15c4a589ab0e6eb790792af0ca9e20e770dcb754435c324b993f33961b47d40d8a54eda089701a58169c3ba74f79b69f28451ba6693251dae28da02a531411ec0e8fd2bba4dc0872538754c62367d510b2935", 0xe1}, {&(0x7f0000000a00)="4ca4886f7da48bc7395c1168509905aa472d19794c8cb006e11a7097a088a60caf34b2c43480b293f09616afe31a16c7266ba25b519119b1ca6b1727aee2d3faa2d253782bb2970d68d5d453a57de11aa01c335a062636085931b615d2f96453f35b55f1bad2f0a2c0a5560f6166f853068fdd683abee2c2cbac5ef37a11af57352fc0bd0807ed1536f4593ccf6d143067380b7a596896c22db8af7d4d4061e0e5f67e96c0daa11f12", 0xa9}, {&(0x7f0000000ac0)="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", 0xfb}, {&(0x7f0000001c80)="ebc55ee93de10ccfa505da65eacdf6be998ffab27a5493f2fe1174c6bff46cd8867f334060e243344707b83e7dd15254299442d7fe328cba0190f757026385f57da451f5ea573c746743be852d1fad946f4b52217e4c26cc99ec65ecda152eb37e097229210bf6c4b9ffd1721d95268234863ae9428b05ac40677cfd5047909140e137b06c4282ce", 0x88}, {&(0x7f0000001d40)="b89c01e99b1e10a0e92d37bfa88045ac1d48b84ce7eb640280ef170ea768d282064fa71dc9c41375a833c4dd3d8eac0d2ac791b8f5e76e6c01acc1c80cac44ac0ddebaa792367129ca5b6248319dc0793fe063f511a46af87efcc9138bea691ed2e6858df4398599e3974b86520b0f55beac4cbf4a6f48860d2c93e31482c781381d54a31a9ebdbfc33c303c62c05fd7cb08ab734dcefbf6f20580e3705b39d056888aa0cbcb0090e398951104f14f0fa553b3c6ac91f8015707666a98355af88e1a2f1c3573cbe5b3d5cf4dbb0a27", 0xcf}, {&(0x7f0000001e40)="406b669047491516b1226106ad56c4a8bb318c502be121e6e01523fe07a1ffaf6f1ff1b7f32165b59a12481325a17f67c4370b61ff0332f701356942fdf8d68ce6212856780ac077280454ec33627bb93ada0b017bd5278b3ac97bc9cd46351e59ced98f6a203d89277151802b49d77a802b4b518f43addef947a221f0e9128d86536678b90b3b6b55bbb3db15d8f06e07665ce8690d4f057ef970c18e81489fa4216b8c", 0xa4}, {&(0x7f0000000bc0)="1d4c6bb6bcaa0fad1a90ccdd1d6a4affa8", 0x11}], 0x7, &(0x7f0000001f80)=[@prinfo={0x18, 0x84, 0x5, {0x10, 0x7fffffff}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x1}}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}], 0x50, 0x4}, {&(0x7f0000002000)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10, &(0x7f0000002140)=[{&(0x7f0000002040)="90c9cf68b4bd0bf51de88e2af3376ff4ff7eb807fad1b52394e19ff3c0e48d082e9bfe05f68af9c369aaa320737a7316b81593b70b846c420329145c2ab6461ed001c44985facb2097425513d80a7da3e3ecb9b5afb2f4ed8a33759cad008225f6397b9173a99a890c9df59d4051203c90e7ee591573a5f63382ff827a9b3f63ca45db035fca5362c88fd4b2b8fd28991e0a116c2c8840afef61c73740f1a986137621717619a239722afe3bf9883321a9bbee52c1eae9fd67132661434495d1efbd6ee67f026343d5fa8afa63c9d5d63ed285b44c8a6cf6c1712b721fe1ed7c146cd22ae5e58d68d421eda789d58d8eae2014", 0xf3}], 0x1, 0x0, 0x0, 0x40010}, {&(0x7f0000002180)=@in6={0xa, 0x3ff, 0xe527, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}, 0x1c, &(0x7f00000024c0)=[{&(0x7f00000021c0)="ba94f153d1435f5297b095b4a1e9cc00ec7dff444d1aff5943d0fca159e05eb89c6804d7142d05ac395c99d296ae55428752d28602db8a6dd19997d300212c819566c9bdd7ee7fc4cb61276661a00bd9bcbeb03a2efffb4b9716c9f7c1733f84f6948bd649a5fd8a1c9aeed3e93693f7812f09fddbd7e7d7597c8f5e5616726b30bb37b125ca093438c8366c359f78ea81d91962767fea6f5b03ec5b84c6efcd96127537308ef02f8979b42abd96fe509f40ed6b474c0b25aca14f576a1ed74390384bef08", 0xc5}, {&(0x7f00000022c0)="08f47a0268d24ae3f020f9be8fd4c9bc62c6fb96157dfcad7274b9ab5d1e3b8ae76486fa3372e6900d2cdc81f1d3a7df15aaf12b0c2d32a9fb3a73564edc32f090ce35cd3c165318d12c6dad5d9a9fad00e2da98549b1502318617ed55481813c8cf49", 0x63}, {&(0x7f0000002340)="613a55d6ff9c010ad51d9b2dec63a2ff62124d7c70bb152dcec2ddc598158b071cfe36b8faab5ccbaf6451d38fc364679796d280285bde4f7275beaecede8b797fc3f03998b4eaa5d0b4d03b6bf09833bc8ec2a1c74b52eeb0f155fd607c170cc6255f1d456b26c1770ab75ebe6fe7c61321840be5b75714c03c8f9894d44adddc63728d45f837b3098b6fed43f906c1f6c8a401097d3ff904084e45bf5a69d64a60843f27acb73f533e0c8e07f124da4963862a9324bccbce51f0836fb684673ee7976fdbcdd1bf61801fb853436819f1", 0xd1}, {&(0x7f0000002440)="02d70beb3770b5ece9c3b1c07abc16f1fbe482c1fb14de0ce3a19f66fb39a639018e9a0523743a8e91fbac990139b65de9c56750ae34fa1de04fbc13ce7df9895c1d873610d2f4366d3c77e1b09ddd8504", 0x51}], 0x4, &(0x7f0000002500)=[@dstaddrv6={0x20, 0x84, 0x8, @mcast2}, @init={0x18, 0x84, 0x0, {0x5, 0x168, 0x4, 0x5}}, @init={0x18, 0x84, 0x0, {0x9, 0x3f, 0x6, 0xffff}}, @sndinfo={0x20, 0x84, 0x2, {0x6, 0x1, 0xff, 0x1}}, @dstaddrv4={0x18, 0x84, 0x7, @empty}, @sndrcv={0x30, 0x84, 0x1, {0x8, 0x5, 0x201, 0x9, 0x6, 0x71, 0x8, 0x3d}}, @sndrcv={0x30, 0x84, 0x1, {0x7ff, 0xe58f, 0x8000, 0x6, 0x8001, 0xffffffff, 0x9d, 0x7}}], 0xe8, 0x80}, {&(0x7f0000002600)=@in={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000003800)=[{&(0x7f0000002640)="a38802664f0fbf0dca2766a33cb5c291371774f24d66a1b794c133d2dc8a390c823ed105824a2db703688155b7d316155dc4f52f93369c34251ff14304b1cb24deaa9984a6783d16e2194f38ce2d2c69c3c1a00d707dc8b553985ae7cf31e3258a9a177f04f86c6fb456dce428e46fba6c6fd3ae8b299c1ae76b8ce3288ccd893d27e56c9f0cbe8d3391a56995cb17b715b25e692f1be954b879020ed0ac5e927a6196e6d5a6f1b5e0299b85e1041af9abcf82384a132fb26443226a4670d2a518ee8e1f41c43fd3a8c6cfe027283e5a29c4388536ae3e7b2bc412a8ffdc153c1838a9572ab3b1916d32312b14a2a6480b9050b888b20fda68c1c2ebb1e0dadd0b3d8a2d63bb5b464da3899f4dfddcc96ae6ad8c46105f46008da489e0b43ceac1f5b86f48dcb9f3fba89677ddce6a6283cf96af99be5a9d1ef44dc76e23054755bb4c07f380346cfb80630805ddfecdab71518b79a0dca04e883cf3aea1411281eb6d391b9bd333808bc2127c3ab2a4a46d002381f61e0f2b6addc2ffd47b4c8d39654e81cb2f748a93a50a3246b1457cd32e5c0620db3b81db851d79d8a29317926c4386a4d9dc91e7f8368a5052fc80591eafb4a944ba88aa77ca99bb37a4c68156c73448737fb4f3628fa4afbdee787ccc8fbd68525e85a9d177ec5eefc05137571b291254ec573053828ec3c1739d81a8397f85b4520f299b91800346ad850ec766265a1c4df12a152a6d476703558d489620c7cdb164592c83f202227126d84643d09b5dc9e9eec860862b0264334dce5fb3c8d49aafb8be2e6a72d0416aa6a55591eded5fc69ab6ed4f2231bf3956a803f30d65e20584489f2f89fca156add7a09a39ada6c7b42c78a97133792af5debb9fbc5367f5b45e9f9cb64734e37572826eafad2177acc0959515ead8108268f8851eff55937bd7a9bbfd6a90ef1557d4d54337bd55d114534ba6416654b89fddc04f5a2c75eccfc7676e76dd9697d922a72019f910648fa0ae0976a313992fe2f0d1635beb41d68b1c7139fa165de86b9c7bf686f02b13674203150472afa0873613660d665a3f242fed553cd534677edf713b957babae7c959afcf17d0846117a550c819114955b9a40ec7ff1e4ad8a5b609b7578343a53ac315d4c365f5d7cf20e17888dfb97c73d9b681a9cdda5f913645a41cde0e3d2d010bbdbd1ba5e2e07a0c75621898667ce29ff3dfcc4840bbf4f54b2868e24969d0b536687033a1eb1f97fae336b3d0d2ce65bf46ee365269859b04e108b2c3b6d0719ca0479250b41c84dcb16c5742eb89b5d3f945d8a5c78b98afbd6f784dd86bacb160140a0d174b1e3854691c5c3f58cb9c351c2f1ba799483dab838fe4b0219121a4a96ba5b18c5304563ee278e75295503dd78e8b1ad2045eeee904b08d2ceb6b5cd44b9ee8c78b6776275498c3fe5962d97dff2272c10eff7f45e90c97481e9d596f3e31c28242bc340f3764838cd3fc373d4d07b5aedd5c174f4a3390a572f64fbbd746af3adbf211f49ab26b19bf2af838e7b868e46fb6eb9e17e258bfe0f069c4517257ec8b76a6b687163d616be41ea9821848824eeb98036b3f3af352d55ca455aa4d38c00b80bb2111699c07d7a3ece470bba0fc3689dfbccc3392e4a8f423c4218ef6cf45f06cfb996ae3e488471a9ceb7f92f281366ccb3c450ea5a97963c607d69de9c907f1e96b367835c22c4d9e13b0a2257ab39730a6e342805e3b92f7e9177ccfc788f16d79a01494ef590bc19290ac6e7a8f22483bca45f02668545716dcfad76d96ac63907063d5ea6ca25198e31c3360b4876c89432814bebe536bdb376863d65e4c325f737eb5e7f6d6f168a3c411d3c27cf932452ae71525da3b6c14cbd49c0024a7fc0ab435245c2e42910e5e933af4c32b0ee29c7a0645e2416b19af55361c8f805ad12e03ae43a04c3f696b95e321519e507fdd3083c4a30a99cda95a57fcd15924e339cb51e3977cfb5056f0278ec4506bd48f60db4da9c4a3919d197516434c3095fa249e76ce835567d49aec240e9a189a669191a3fcfd7d658c0854a9dec3481ed5027565b1a4820cdbe90221ea3b534bfbbe9e426fef7933489d18b17778137548f1d74c61e5516ea281a0c03bb5245a11b14526eb5c85af25791fd6d66523c58029e96c310a1ea2759a84cd0efa3c0c1d25360e66bf68d3f15497c9d0d39bd21eb449caed6f13648f961f59ee20f27114a05a91627ca2f506c87812b4f5e084ea8b14ecb455464e292ac37504e53518e62f91f8a7bd2b5889b60962495bff0d3c0f43744514b42c28aed48bf59c27a2efcb6d1d81d20ec1ac17c9e268c621dd53d967b101aab038aaf561a73714f9ca56301b1dcaee2c263c49022c2986bb7593aa691435523d97f14405033e25a4e086fa8e52c830db41e34b3192ab24d77a065aa03b3615460fb467a068150e0e3b71aa6f29bb5bf1caccd779cd530ba4ef53d3527b26d09b2a2f8f26f87e43aba669f1e60b109364583de8821dbbd520083ea9f85fb3d6dc1891a6af8ca212ba326b29934d3248e0bc8c3ea286b67a20a431df41839c8a601b097c182f0a77b6de627cffdcc2c6868034472f10c757c1171604095662f51d5f5381479a5ae0c0368510e37943db32311586c16fd8a55598fec08c344a30a0479bea7a90ced2af1711facda6d0205c2c9ffefd10ce551fa658d7c2341eea85c2e38fea46db9b0b4cc468ff31ec7dbf8c1d36f5965f331fae0f7a8c39505bec7ab9773dc547386957ff99f04b55907bdced3750949398f6d2f4354e2e9f07aa36e7c66c93310b94b4aa8a1f5345dfd2ef5a1c5471c139e147f6c39e06a6b6bc48baf4664e2dbee034502f210c3fca62383394a56a34aed9a5caf868b48e65fb38e31a0c80b7d47f96a9c05de55d314c5820f6508e5ffa318f44e09f44f1c445bc958e608cc209c62c52c011a16315bda8a8122d8fa71ded0fc049b961b224352911e5176ad5fba1e2c85b2af4b2e8a432c873682e0f8eb640506e8d2473527db7dbaa43c06a14b172be24def2e3b314a1ac23b44b646aa4bddb5bb5ab15e394dbc2af58db31c0c63446b37924b0b1df9c8b5b929f3ccc2ff5c7d955b39732bbe8a6e0ac0a7b845c05cd917333f68bb47620c2d9872136459567330e456019cc947bc1c35620bb3be69e6142c0009dc9565eb1a8c55952e8f88e124b20fe06187de4cbb39b96bb04477801d168e4c2ece891bd109fc4d93473eeb933566e6d52638c48a7d39fe99f6090594b20e559b7ee7424bcb7a58f5e75e15a0b840a9330f0bfc16e658c5e25a339a40a5aa0e38f12940f5bb38866f919ffb54b48720e3fed37df0a9bc352c446f1b644c9f5267c630193f2c33ff5f3e09cc0aadedb8f0145e977f00a30b9b11169f3bbbf6d541ef9f67e310a4a8ab8e351ffa86b7d43ce1e1db452ceb32b39172acb3878719c73c912e1c0103302d7ec385009dc29de11231dd2e5ed8ffcf2a506bb52998ed963d16f685084bfd11d4ad659d5cd6496d34060ab53a859c05d578034e9de65bc465c9378e291ab405194ce609551aa8660acd638f8846064afad618d54379ebd8225a4ea5212ceb66913b2043b21b4c13da65fcf8267d82e31240ddf0498f6da4a4faaecdd3b6c96bc8395de77ea388f909fb4e0b7edb34a34090000ad4153dd828b1d14432faf7da62c76d7aaa1016d3c4a06fa4d796268ab494910b18b02e4466371dd394f4aacf89f3f5a6ad33ff06f5f8d1e24baa7bf8cada0eab6081017d7223c39f64004724905f20948ad83b300a48856faf30410b70bb363a11b713afc76304b43f9eca02b0950d43cfaacb6b595ae2a5c961be4f590375344bcc4ce00d99675f0f56c364d431393dfc5fbfc813f8bb338ba996143db7fa55cc98089387f6414e6c8030e7e28b345efffc20a98090bec5424527174a848479556137a22ec0868d83540905a7786b730eb6a5a96291650f4dd971acc36b5353831ad79476e693946a39e1dc3a8571c2464a2b37eb6016e330de6987d4ae4d8ae8877f1e5ef416db61140ac42b21b5b219b476c4b7756d0afd9eaa3b52e3e48309f63fe45cdf7279a125296ec8a027c771ff86547c2bc29a0c928da0d98e88a8b402ce7eed38439c5da3a06356df7bc6eb09b411886e3aa9f82ae2a2582a9fc53e99102c594b3d41a8369fd3ab6b10ebc1329a11834453ad7074ca0e72cbfa5ae32111919c739a0fd9c8c1fc59260e232103bc603ea51968031af2d47a736cf534d2a0af677adbcbd8345524495db1810ca1d4ea75633b6d3a9f33c1598f3fbce519c45c3bafacc0c87372a5dacf84213bf2424ad30beee56583243456122e950cfc4de3c059166e5a4aeb45592908af2acc880b9a809ccd19073fb7553dd40fa9a20e900122ee3ffde5e482d4bbb8a2a490ed8aebc2849e22675f059a44f7f92b058c991f051b8e36e9053b777227979f5509194a58d898f723093cafa6907056dfa32a4f2af99551d5fd55d93776064b3dfbd8793c43c1789247e0f456e94fdc28e2ddc359b26da3ef054569c5a549d6546cd5cdc9f015d8cfc054673d77289bef760149a017e8a21b4453026771a78de227068a6e55e5ba54c08bd767d16ea423812e8401447d684a3e82349a07f7cd7003abf8edea8afc193fc6e08097c33820509c4d79177a0c04a1e45767d30e66b1851db71e54752186c2cca95003d0ee88d34fe43b6bfd3c29e7f8668f502bf4ccc560dc7c8da118f05f28fd537ed44732600f01dbce094d49ef22438a9cd40bc94c8f21bfe7318524fc2e0758340e03dc321c4a724f08f32c6d067e06b706b0d1aeef2a84146867a895c8a7cac6aab276ea7f00dded43d2d80043c22068d7bb81178f8b650e2a74ba5dd20426c15e8eca5b5acd8f17a5d683567302a908030452ed99523064b00b4e2a57284e49ae401539c8b43f43913a023d89f48e04e9282144f32d0b3b247a2fbb1de28a0f26a95c61153ecd0ab3895ab8176b522ebc7859340a9dbfab3da84bed96add4604690de9c5cf6352e93c19cecea31f06b58f5d331d4e0a12787efd61213b051c1b63077432190512d2e3de2831bf2b87325d4aae911f5fda46e182ffd626cd38485fd957b2ddbb74865d66d15a886aed48b751c1cd5723d4908a8810b49b2824682edcf26873ecd80b0a4f7cad7fd8b7a6f01452706283958b58b1760c419ac9bc402fdb46f4941f36fb353eeeff2af7af0763a8184009caa074a11905581962f127aca1218b17aa50b0f583d328dbcc966ef7c54471c512e3a0d3588f1b7f9a3340991eb0d9f6dbf9a9a118aa2ca4fe5e804492e83218dd83ab5433eec2f85ff5ac8cb4c931e26a18cfa7885955458905a64a535da52828f8346d03bac6d55a10ae45b36f8644f2c4e2cad91575c531e369bfcb36a26e74a066281f05327a91907486cd57b75f889c9a3332a147b22f84f99587ecd8fe636e883fe6e5a83c327184855d96e133a7b0cb956b232fd73ca52f50040741ac642447f1533f6291d720dabc6b86a4e89b7560d496562b08591ad3372eddda59342a13666c47328005c68f7d4950b41933695de7310c75469d79090c75e90ebd6e30b5f127ceb427084c223d6498360cfa5f8513933d3e01d6a3bdbc65933d899ab2b300c87458ac1cbcc4221989fba6c5a22667a3b06f76fff5305b7801691b3d6274230da316d90fa975feec92e610fd0ab13b687000d985cbadce05ad7f92c501647574a89bc16b61f25c0ff026a6a2865069c443d557658a65d", 0x1000}, {&(0x7f0000003640)="28c800389d5704b9a5a6025e4bd4c567aa69788508a00ae5e22b9242288c600287b01d03f85e500c9e8b48a2acfa6ebd9a9a99bf423b15d9acb2809f717d5f772dbe772358a6ed5f065dba5a30925d37a9485903e16cff65e7947668e1dd9b990b7511a62c1f5d15b3723bc12576947d2ed3c28084b982b72b9b263013e1e58a08e5014fc4dcd67c", 0x88}, {&(0x7f0000003700)="d4250cf43948333cb97875bb029917fbfadf40acbcc0aad84d795c82e555269f570b014e980158494f23fbe484d00531cc126928c1d81321e53ac73f54b292340250ba27ca578423897a301fcce1e88170d2e173cacb0b161abca30c09963caad784eff80c519f385f6f8589d846857ca59b7a081c5499a4359b8f8dfb37f8ab613749df93f6e7629a4927f9cf098b8e06a87958e7f582a42ec8478d3a6ae1865b0e75207e29283d177c7df4a5642fe5ad47e1d5c0402a1edf907de7832e4ebd64faa875c4c7590da3d0e9fd4ab324945557e3fc841ef44fbb85d2c0270e019bbed4b7581091943eb4da5634d837ab", 0xef}], 0x3, &(0x7f0000003840)=[@sndinfo={0x20, 0x84, 0x2, {0x2, 0x0, 0x2, 0x7, r7}}], 0x20, 0x1000}], 0x6, 0xc001) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 02:23:02 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=[@iv={0x0, 0x117, 0x2, 0x0, "15dc91768c78ba00960b7a5e4e7907526d7c7c8aee968a562b00cb905e1826a8f9ee0ac480576a7134801fc070041984c5c23fa0f93b59075853f70545ce9c61b15ff65cde5078b4209217f0220f0810f739bd470d405272edb16434a11869d08d8fef065de94710ee553b410c3c02a96c156836af8d11c4af4a77e766f9ed8ec43830fe02bb22babf9b41d4e5027b49ba3f720465bf4ee9b63892030f4fea97d94bc6cd1a7d4d6869cb3185e5da3ca0da"}, @op, @assoc, @assoc, @op, @op]}], 0x4924924924924b3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8}]}], {0x14}}, 0x7c}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x1, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x2000) setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000000), 0x4) 02:23:02 executing program 3: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000000080)=""/31, 0x1f}, {&(0x7f0000000100)=""/64, 0x40}, {&(0x7f0000000180)=""/163, 0xa3}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f0000000240)=""/23, 0x17}, {&(0x7f00000012c0)=""/192, 0xc0}, {&(0x7f0000001380)=""/75, 0x4b}], 0x7, &(0x7f0000001480)=""/84, 0x54}, 0x100) r5 = socket(0x10, 0x803, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0xe000000, &(0x7f0000000180)=[{&(0x7f0000000000)="2e000000120081aee4520cecff0e00fa078b5bdb4cb904e473730e55cff26d1b0e001d80040000005e510befccd7", 0x2e}], 0x1}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x10, &(0x7f0000000300)={r8}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f00000000c0)={r8, 0xd0e}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000001540)={0x0, 0x1, 0x6, 0x8, 0x4, 0x1000, 0x4, 0xfe000000, {r8, @in6={{0xa, 0x4e21, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4}}, 0x6, 0x3ff, 0x7, 0x5d, 0x3}}, &(0x7f0000001600)=0xb0) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000001640)={r9, 0xffffffff}, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r3, 0x0, 0x80000001, 0x0) [ 3126.727066][T22328] netlink: 'syz-executor.3': attribute type 29 has an invalid length. 02:23:03 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r1, &(0x7f0000000140)={@val, @void, @eth={@link_local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4b549f", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}}, 0x4e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socket(0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x9, &(0x7f00000001c0)=[{0x5, 0xdc, 0x9, 0x46d}, {0x2, 0x20, 0x4, 0x2}, {0x0, 0x20, 0x8b, 0x7}, {0x5, 0x4, 0x1, 0x6}, {0x5, 0x3, 0x5, 0x7}, {0x3, 0x0, 0x3, 0x101}, {0x3f, 0x8, 0x1, 0x4}, {0x2, 0x6, 0xf9, 0x1}, {0x9, 0x1, 0x4, 0x5}]}, 0x10) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) [ 3126.783069][T22310] lo speed is unknown, defaulting to 1000 [ 3126.789960][T22320] sit0: Master is either lo or non-ether device [ 3126.797506][T22328] netlink: 'syz-executor.3': attribute type 29 has an invalid length. 02:23:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x600}}}, 0x24}}, 0x0) 02:23:03 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003170200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) 02:23:03 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=[@iv={0x0, 0x117, 0x2, 0x0, "15dc91768c78ba00960b7a5e4e7907526d7c7c8aee968a562b00cb905e1826a8f9ee0ac480576a7134801fc070041984c5c23fa0f93b59075853f70545ce9c61b15ff65cde5078b4209217f0220f0810f739bd470d405272edb16434a11869d08d8fef065de94710ee553b410c3c02a96c156836af8d11c4af4a77e766f9ed8ec43830fe02bb22babf9b41d4e5027b49ba3f720465bf4ee9b63892030f4fea97d94bc6cd1a7d4d6869cb3185e5da3ca0da"}, @op, @assoc, @assoc, @op, @op]}], 0x4924924924924b3, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x58800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8}]}], {0x14}}, 0x7c}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r2}) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}], 0x4924924924924b3, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) unshare(0x40000000) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) pipe(&(0x7f0000000240)) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) accept4(r5, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000080), 0x4) [ 3126.989697][T22340] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3127.036715][T22344] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 3127.155236][T22348] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3127.170838][T22345] IPVS: ftp: loaded support on port[0] = 21 [ 3127.218187][T22357] IPVS: ftp: loaded support on port[0] = 21 02:23:03 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB="3c000000100001040000000000000000000000bf", @ANYRES32=0x0, @ANYBLOB="2b03000000000000140012800b00010067656e65766500000400028008000a00", @ANYRES32=r1, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@deltaction={0x18, 0x31, 0x0, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x4054) [ 3127.636944][T22368] IPVS: ftp: loaded support on port[0] = 21 [ 3127.653478][T22310] lo speed is unknown, defaulting to 1000 [ 3127.689421][T22378] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 3127.800209][T22345] lo speed is unknown, defaulting to 1000 02:23:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x700}}}, 0x24}}, 0x0) 02:23:04 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8}]}], {0x14}}, 0x7c}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'veth0_to_bond\x00', {0x7, 0x0, @multicast2}}) write$tun(r1, &(0x7f0000000180)={@val, @void, @eth={@link_local, @local, @val={@void, {0x8100, 0x7, 0x0, 0x3}}, {@can={0xc, {{0x2, 0x0, 0x0, 0x1}, 0x8, 0x3, 0x0, 0x0, "5b2ee1231b862896"}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socket(0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r5, 0x8982, &(0x7f00000000c0)={0x6, 'bond_slave_1\x00', {0x80000001}, 0xfff9}) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) [ 3128.000185][T22394] IPVS: ftp: loaded support on port[0] = 21 [ 3128.592086][T22416] IPVS: ftp: loaded support on port[0] = 21 [ 3128.605068][T22374] device geneve3 entered promiscuous mode [ 3128.986919][T22357] lo speed is unknown, defaulting to 1000 [ 3128.986941][T22345] lo speed is unknown, defaulting to 1000 02:23:05 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r1, &(0x7f0000000140)={@void, @void, @eth={@link_local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4b549f", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}}, 0x4a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socket(0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) [ 3129.227094][T22427] device geneve3 entered promiscuous mode [ 3129.749995][T22368] lo speed is unknown, defaulting to 1000 [ 3129.750017][T22357] lo speed is unknown, defaulting to 1000 [ 3130.171131][T22416] lo speed is unknown, defaulting to 1000 [ 3130.531572][T22368] lo speed is unknown, defaulting to 1000 [ 3130.567838][T22416] lo speed is unknown, defaulting to 1000 [ 3132.569970][ T266] tipc: TX() has been purged, node left! 02:23:10 executing program 4: setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x9, 0x80000, 0x5) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="e4c5857e0fd27a4569490fb444ef75a7b56412187d01f8f10e4f72ef7067b9a376ff4f4f48c426d376ee13ecaf2bcdfc9a766517f758aead48236c004638b4995bc6527b40cd7b21b852f9df004d84b4bf8e2a3bc3dde07bb0905a276a7f316f0261169be1d419a945f17bdbe51bdf7dc7cafade3173fb757390915899a237f442bfa2d6b0804c6dc7f00852f10c4cda372804eb04d883e171288f5f718fcacef2aeb4a59b7ccb79", 0xa8, 0x9f926d026e107c24, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r2) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x80000001, 0x2) write(0xffffffffffffffff, &(0x7f0000000080)="2400000012005f3414f9f40700090400818a0400"/36, 0x24) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000180)=0x40) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x1ff) close(r1) 02:23:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x900}}}, 0x24}}, 0x0) 02:23:10 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003180200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) 02:23:10 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r1, &(0x7f0000000140)={@val, @void, @eth={@link_local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4b549f", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}}, 0x4e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socket(0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = accept4$inet(r5, 0x0, &(0x7f00000000c0), 0x80000) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0xf4a}, &(0x7f0000000200)=0x8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 02:23:10 executing program 1: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000050070000000f000000001d6b00047b0000000400ce2100000900020073797a30"], 0x1}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$kcm(0x10, 0x2, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x20, r2, 0x1, 0x0, 0x0, {0xa}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x20}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, r2, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5e}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x758}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5c}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_batadv\x00'}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20040011}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007948008000000b00050001"], 0x1}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r4, 0x0, 0x100000002) [ 3134.477044][T22567] __nla_validate_parse: 8 callbacks suppressed [ 3134.477054][T22567] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3134.495967][T22568] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 3134.569273][ T29] audit: type=1804 audit(1595470990.888:4863): pid=22566 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir805535454/syzkaller.0DLSKc/4251/cgroup.controllers" dev="sda1" ino=15919 res=1 [ 3134.662089][T22572] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3134.884394][T22578] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3134.951481][T22568] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 3134.984097][T22572] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 02:23:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000440)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000480)={0x634, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x60c, 0x8, 0x0, 0x1, [{0x264, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg='\xdb\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff'}, @WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @dev}}, {0x5}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @local}}, @WGPEER_A_ALLOWEDIPS={0x1fc, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}]}]}, {0x3a4, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g='\xd1s(\x99\xf6\x11\xcd\x89\x94\x03M\x7fA=\xc9Wc\x0eT\x93\xc2\x85\xac\xa4\x00e\xcbc\x11\xbeik'}, @WGPEER_A_ALLOWEDIPS={0x328, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @empty}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @local}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x17}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, [], 0x1}}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @mcast2}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg='\xdb\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff'}, @WGPEER_A_FLAGS={0x8}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x634}}, 0x0) 02:23:11 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB="3c000000100001040000000000000000000000bf", @ANYRES32=0x0, @ANYBLOB="2b03000000000000140012800b00010067656e65766500000400028008000a00", @ANYRES32=r1, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@deltaction={0x18, 0x31, 0x0, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x4054) [ 3135.391255][T22607] IPVS: ftp: loaded support on port[0] = 21 02:23:11 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000001c0)={{0x14}, [], {0x14}}, 0x28}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000040), &(0x7f0000000080)=0x40) sendmmsg(r0, &(0x7f0000002780), 0x400004d, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000)='THAWED\x00', 0x7) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=[@iv={0x0, 0x117, 0x2, 0x0, "15dc91768c78ba00960b7a5e4e7907526d7c7c8aee968a562b00cb905e1826a8f9ee0ac480576a7134801fc070041984c5c23fa0f93b59075853f70545ce9c61b15ff65cde5078b4209217f0220f0810f739bd470d405272edb16434a11869d08d8fef065de94710ee553b410c3c02a96c156836af8d11c4af4a77e766f9ed8ec43830fe02bb22babf9b41d4e5027b49ba3f720465bf4ee9b63892030f4fea97d94bc6cd1a7d4d6869cb3185e5da3ca0da"}, @op, @assoc, @assoc, @op, @op]}], 0x4924924924924b3, 0x0) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000e, 0x10, r3, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[], 0xfffffe3e) ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00) [ 3135.502909][T22578] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3135.588960][T22607] lo speed is unknown, defaulting to 1000 02:23:11 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r1, &(0x7f0000001380)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000d74d3d8e8b2af38648f8a840042868e2f505b696219c93c5bba178f1f3a90474cba01e8abcd47a6f77238042ee65cbb31fb38320eb72fcd643551a37dd18cb1b442caa6cbd9408"], 0x113e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socket(0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 02:23:12 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003190200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) 02:23:12 executing program 1: socket$kcm(0x10, 0x2, 0x10) 02:23:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xa00}}}, 0x24}}, 0x0) 02:23:12 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="ab553fec94248c32e27d04000000288a", 0x10) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=[@iv={0x0, 0x117, 0x2, 0x0, "15dc91768c78ba00960b7a5e4e7907526d7c7c8aee968a562b00cb905e1826a8f9ee0ac480576a7134801fc070041984c5c23fa0f93b59075853f70545ce9c61b15ff65cde5078b4209217f0220f0810f739bd470d405272edb16434a11869d08d8fef065de94710ee553b410c3c02a96c156836af8d11c4af4a77e766f9ed8ec43830fe02bb22babf9b41d4e5027b49ba3f720465bf4ee9b63892030f4fea97d94bc6cd1a7d4d6869cb3185e5da3ca0da"}, @op, @assoc, @assoc, @op, @op]}], 0x4924924924924b3, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000240)=""/114, &(0x7f0000000300)=0x72) r3 = accept$alg(r1, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r4, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000) sendfile(r3, r0, 0x0, 0x80000001) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=[@iv={0x0, 0x117, 0x2, 0x0, "15dc91768c78ba00960b7a5e4e7907526d7c7c8aee968a562b00cb905e1826a8f9ee0ac480576a7134801fc070041984c5c23fa0f93b59075853f70545ce9c61b15ff65cde5078b4209217f0220f0810f739bd470d405272edb16434a11869d08d8fef065de94710ee553b410c3c02a96c156836af8d11c4af4a77e766f9ed8ec43830fe02bb22babf9b41d4e5027b49ba3f720465bf4ee9b63892030f4fea97d94bc6cd1a7d4d6869cb3185e5da3ca0da"}, @op, @assoc, @assoc, @op, @op]}], 0x4924924924924b3, 0x0) r6 = accept4$inet6(r5, 0x0, &(0x7f0000000080), 0x800) recvfrom(r6, &(0x7f0000000140)=""/160, 0xa0, 0x3, 0x0, 0x0) [ 3135.793320][T22627] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 3135.825317][T22629] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3135.905099][T22634] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3135.964810][ T29] audit: type=1804 audit(1595470992.288:4864): pid=22642 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir805535454/syzkaller.0DLSKc/4254/memory.events" dev="sda1" ino=15945 res=1 [ 3136.056574][ T29] audit: type=1800 audit(1595470992.328:4865): pid=22642 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=15945 res=0 [ 3136.150112][ T29] audit: type=1804 audit(1595470992.338:4866): pid=22642 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir805535454/syzkaller.0DLSKc/4254/memory.events" dev="sda1" ino=15945 res=1 02:23:12 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x1405, 0x100, 0x70bd28, 0x25dfdbff, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8}, {0x8, 0x3, 0x1}}, {{0x8}, {0x8}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000}, 0x4000) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYRES64], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) [ 3136.246711][ T29] audit: type=1804 audit(1595470992.438:4867): pid=22642 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir805535454/syzkaller.0DLSKc/4254/memory.events" dev="sda1" ino=15945 res=1 02:23:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 3136.342882][ T29] audit: type=1800 audit(1595470992.448:4868): pid=22642 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=15945 res=0 [ 3136.362864][T22641] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3136.466228][T22608] device geneve3 entered promiscuous mode [ 3136.485009][ T29] audit: type=1804 audit(1595470992.458:4869): pid=22642 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir805535454/syzkaller.0DLSKc/4254/memory.events" dev="sda1" ino=15945 res=1 [ 3136.568510][ T29] audit: type=1804 audit(1595470992.458:4870): pid=22642 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir805535454/syzkaller.0DLSKc/4254/memory.events" dev="sda1" ino=15945 res=1 [ 3136.797883][T22649] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 3136.848077][T22649] device bond10 entered promiscuous mode [ 3136.870178][T22649] 8021q: adding VLAN 0 to HW filter on device bond10 [ 3136.892437][T22663] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 3136.907732][T22651] bond10: (slave bridge68): making interface the new active one [ 3136.917486][T22651] device bridge68 entered promiscuous mode [ 3136.925615][T22651] bond10: (slave bridge68): Enslaving as an active interface with an up link [ 3136.935537][T22607] lo speed is unknown, defaulting to 1000 02:23:13 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x20000000003, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000300)={0x0, &(0x7f00000002c0)}) close(r2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r1, &(0x7f0000000140)={@val, @void, @eth={@link_local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4b549f", 0x14, 0x6, 0x0, @empty, @private0, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}}, 0x4e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1, 0x4, 0x4, {0x0, 0x2710}, {r6, r7/1000+10000}, {0x2, 0x0, 0x0, 0x1}, 0x1, @can={{0x2, 0x0, 0x0, 0x1}, 0x5, 0x2, 0x0, 0x0, "77ad2e81560e4fda"}}, 0x48}, 0x1, 0x0, 0x0, 0x44008041}, 0x8010) socket(0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x18100, 0x0) [ 3136.989799][T22629] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3137.049523][T22664] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3137.079060][T18065] IPv6: ADDRCONF(NETDEV_CHANGE): bond10: link becomes ready [ 3137.232495][T22649] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 02:23:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xc00}}}, 0x24}}, 0x0) 02:23:13 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a00031a0200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) [ 3137.511938][T22779] netlink: 'syz-executor.2': attribute type 9 has an invalid length. 02:23:14 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xe000000, &(0x7f0000000180)=[{&(0x7f0000000000)="2e000000120081aee4520cecff0e00fa078b5bdb4cb904e473730e55cff26d1b0e001d80040000005e510befccd7", 0x2e}], 0x1}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x10, &(0x7f0000000300)={r4}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000000c0)={r4, 0xd0e}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000040)={r4, 0x4}, 0x8) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x47, 0x0, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r5, &(0x7f0000000340)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r6, 0x0, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}}, 0x80) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000300)=0x2, 0x4) 02:23:14 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0x6) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0xac14140d}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f00000009c0)=@nl=@proc, 0x80, &(0x7f0000000ac0)}, 0x40002000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r1, 0x0, 0x8000000000004) socket$inet6(0xa, 0x0, 0x0) recvfrom(r0, &(0x7f0000000100)=""/94, 0xffffffffffffff5e, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8}]}], {0x14}}, 0x7c}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000900)={r2, 0x7, 0xff, 0x9bf}) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=[@iv={0x0, 0x117, 0x2, 0x0, "15dc91768c78ba00960b7a5e4e7907526d7c7c8aee968a562b00cb905e1826a8f9ee0ac480576a7134801fc070041984c5c23fa0f93b59075853f70545ce9c61b15ff65cde5078b4209217f0220f0810f739bd470d405272edb16434a11869d08d8fef065de94710ee553b410c3c02a96c156836af8d11c4af4a77e766f9ed8ec43830fe02bb22babf9b41d4e5027b49ba3f720465bf4ee9b63892030f4fea97d94bc6cd1a7d4d6869cb3185e5da3ca0da"}, @op, @assoc, @assoc, @op, @op]}], 0x4924924924924b3, 0x0) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000a80)=0x0, &(0x7f0000000ac0)=0x4) sendmsg$can_j1939(r3, &(0x7f0000001c00)={&(0x7f0000000b00)={0x1d, r5, 0x1, {0x0, 0x1, 0x4}, 0xfd}, 0x18, &(0x7f0000001bc0)={&(0x7f0000000b40)="d0e3ad2ad83f6624fc3a7d5f280932ec18b3b512810eee3dd830", 0x1a}, 0x1, 0x0, 0x0, 0x1}, 0x4000) [ 3137.808845][T22793] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 3138.030100][T22793] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 3138.071695][T22810] netlink: 'syz-executor.2': attribute type 9 has an invalid length. 02:23:14 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$netrom(r0, &(0x7f0000000140)={{}, [@rose, @netrom, @null, @netrom, @default, @remote, @default, @null]}, &(0x7f00000000c0)=0x48) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r1, &(0x7f00000001c0)={@val={0x0, 0xf6}, @val={0x1, 0x3, 0x1ff, 0x0, 0x5, 0xd3}, @eth={@link_local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @empty, @private0, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}}, 0x58) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socket(0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r5, &(0x7f0000000100)=ANY=[], 0xfffffe3e) r6 = openat$cgroup_ro(r5, &(0x7f0000000240)='cpuacct.usage_sys\x00', 0x0, 0x0) recvmsg$can_raw(r6, &(0x7f0000000440)={&(0x7f0000000280)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000300)=""/18, 0x12}], 0x1, &(0x7f0000000380)=""/180, 0xb4}, 0x100) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 02:23:15 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a00031b0200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) 02:23:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xe00}}}, 0x24}}, 0x0) 02:23:15 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0x6) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0xac14140d}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f00000009c0)=@nl=@proc, 0x80, &(0x7f0000000ac0)}, 0x40002000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r1, 0x0, 0x8000000000004) socket$inet6(0xa, 0x0, 0x0) recvfrom(r0, &(0x7f0000000100)=""/94, 0xffffffffffffff5e, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8}]}], {0x14}}, 0x7c}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000900)={r2, 0x7, 0xff, 0x9bf}) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=[@iv={0x0, 0x117, 0x2, 0x0, "15dc91768c78ba00960b7a5e4e7907526d7c7c8aee968a562b00cb905e1826a8f9ee0ac480576a7134801fc070041984c5c23fa0f93b59075853f70545ce9c61b15ff65cde5078b4209217f0220f0810f739bd470d405272edb16434a11869d08d8fef065de94710ee553b410c3c02a96c156836af8d11c4af4a77e766f9ed8ec43830fe02bb22babf9b41d4e5027b49ba3f720465bf4ee9b63892030f4fea97d94bc6cd1a7d4d6869cb3185e5da3ca0da"}, @op, @assoc, @assoc, @op, @op]}], 0x4924924924924b3, 0x0) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000a80)=0x0, &(0x7f0000000ac0)=0x4) sendmsg$can_j1939(r3, &(0x7f0000001c00)={&(0x7f0000000b00)={0x1d, r5, 0x1, {0x0, 0x1, 0x4}, 0xfd}, 0x18, &(0x7f0000001bc0)={&(0x7f0000000b40)="d0e3ad2ad83f6624fc3a7d5f280932ec18b3b512810eee3dd830", 0x1a}, 0x1, 0x0, 0x0, 0x1}, 0x4000) [ 3138.849962][ T266] tipc: TX() has been purged, node left! 02:23:15 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000380)) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000000)={0x25, 0x80, 0x5, 0x8, 0x0, 0x81}) 02:23:15 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8}]}], {0x14}}, 0x7c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8}]}], {0x14}}, 0x7c}}, 0x4000844) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r5, @ANYRESHEX=r6, @ANYRES32=0x41424344, @ANYRES16=r2], 0x4e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socket(0x17, 0x5, 0x400) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 02:23:15 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0x40305839, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x140d, 0x8, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x884}, 0xc0) sendfile(r1, r2, 0x0, 0xf03b0000) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x8000000}) 02:23:16 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4, 0x8}}]}, 0x34}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) getsockopt$bt_hci(r3, 0x0, 0x2, &(0x7f0000000200)=""/229, &(0x7f0000000300)=0xe5) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.events\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl1\x00', r1, 0x2f, 0xf8, 0x4, 0x7fffffff, 0x0, @mcast2, @private1, 0x40, 0x7, 0x8, 0x4e0}}) [ 3139.793894][T22847] __nla_validate_parse: 9 callbacks suppressed [ 3139.793904][T22847] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:23:16 executing program 3: unshare(0x40040000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8}]}], {0x14}}, 0x7c}}, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x80010, r0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @rand_addr=0x64010102}}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8918, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @local}}) 02:23:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x2000}}}, 0x24}}, 0x0) 02:23:16 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a00031e0200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) [ 3140.022470][T22894] IPVS: ftp: loaded support on port[0] = 21 [ 3140.093828][T22901] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3140.130952][T22904] validate_nla: 4 callbacks suppressed [ 3140.130962][T22904] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 3140.194207][T22894] lo speed is unknown, defaulting to 1000 [ 3140.205107][T22906] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. 02:23:16 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x17, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61, 0x0, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [0x61], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={r0, 0xfd, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x1a, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000024eaff0ff2a4d129e62b2c18850c5c7cb99877460474f3f47dd3a081ba9d8f470c09c0d22477fe43dc05a69a58b33247639e5c0b81ab97187fc4077f56ab7379ce6cadfb9373ba97170f92ebb35915c433cbb96defbb032e92621f0638e551101666fd4fcd41cbc1d35133cfc9e2e486a82187587280218be365d33090"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, r0}, 0x74) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r1, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x54, r3, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x100}]}, @NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3ff}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x14, 0x22, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7fff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xc7}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008000}, 0xc098) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000006110020000000000c60000000000000095000000000000008ae0a06d4fc912352a1f5f2fd82b840cd799ce95de8cd365b48f02"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10, r1}, 0x78) [ 3140.237669][T22910] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:23:17 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000280)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000800}, 0x80) r3 = socket$inet6(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x30, 0x0, 0x400, 0x0, 0x800000, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="705b0d517885"}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x60008810}, 0x44880) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x44, r5, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffffff04}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x400}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r6 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f1, &(0x7f0000000000)={'macvtap0\x00', &(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRES64, @ANYRES16]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) 02:23:17 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$SIOCX25SENDCALLACCPT(r5, 0x89e9) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r1, &(0x7f0000000140)={@val, @void, @eth={@link_local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4b549f", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}}, 0x4e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socket(0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) [ 3140.675632][T22901] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3140.761687][T22910] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3140.768273][T22932] IPVS: ftp: loaded support on port[0] = 21 [ 3140.809065][T22899] IPVS: ftp: loaded support on port[0] = 21 [ 3140.846708][T22904] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 3140.855151][T22894] lo speed is unknown, defaulting to 1000 [ 3140.857975][T22932] lo speed is unknown, defaulting to 1000 02:23:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x2a66}}}, 0x24}}, 0x0) [ 3141.200813][T22962] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3141.307950][T22963] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3141.325698][T22964] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3141.370092][T22899] lo speed is unknown, defaulting to 1000 [ 3141.373965][T22932] lo speed is unknown, defaulting to 1000 02:23:17 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x17a4, r1, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x1}, @NL80211_ATTR_IE={0x78e, 0x2a, "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"}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac05}, @NL80211_ATTR_BEACON_HEAD={0x72e, 0xe, "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"}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x3}, @NL80211_ATTR_IE_ASSOC_RESP={0x8b4, 0x80, "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"}]}, 0x17a4}, 0x1, 0x0, 0x0, 0x20000002}, 0x80) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) setsockopt(r0, 0x1, 0x24, &(0x7f00000000c0)="890538e4", 0x4) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000001a00)) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000001a40)={@multicast1, @remote}, &(0x7f0000001a80)=0x8) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f00000019c0)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x30, r3, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="859056a0c629"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) 02:23:17 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003220200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) [ 3141.536784][T22962] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3141.544548][T22999] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 3141.621531][T22936] IPVS: ftp: loaded support on port[0] = 21 02:23:18 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000180c2000000aaaaaaaaaaaa86dd604b549f0014060000000000000000000000000000000000fe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000890780000"], 0x4e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socket(0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 02:23:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x3f00}}}, 0x24}}, 0x0) [ 3142.000179][T22899] lo speed is unknown, defaulting to 1000 [ 3142.030696][T22936] lo speed is unknown, defaulting to 1000 [ 3142.069497][T22999] netlink: 'syz-executor.2': attribute type 9 has an invalid length. 02:23:18 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003230200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) [ 3142.598696][T22936] lo speed is unknown, defaulting to 1000 [ 3142.716537][T23077] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 3143.151054][T23114] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 3145.570529][ T266] tipc: TX() has been purged, node left! 02:23:22 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x4000000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="c17dee1d19cc6b841d067a3fbb1e6afb98ae9df571767a81c20fbf626cff7bdc1ea0033ee3b0251582d40fe0b6137b417ca7219c744015951aa70d9a505d45c203a312ce2e31af5f6da1eb6fef138645c72fe237fd97b691f309f352a15c7cd4419a771c5506d7be691130165713d4a65e924ac715662a66c46d22eef7588b4a33c89667e95766c5b1cfbc1d51"], 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfef0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0) syz_genetlink_get_family_id$fou(0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) writev(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000180)}, {&(0x7f0000000240)="5c8aae08aad2f771ad89190786df5a84d36e244413efbf1a999a7bbdbe170f51bccb2254542cf4a4bc0cc91f324c9e52970cf208", 0x34}, {&(0x7f00000002c0)="88705c8a3b7cdfb65cafa01a1c618bbf52ff1038284024661da457eff4218ab08bff105d905d8ddc3062767b59407432f9a4c1e2d5c0a93a57d23971a728e6fb13a1343f936b96c9dc45c2bcda0207038e2b6ca14af87fc7ca3a2a14d63d0e969e91478a670b76bc1a08c20289178a", 0x6f}, {&(0x7f0000000340)}, {&(0x7f0000000640)="e95d3f462d373df306deb38bb2a39b303569931cc2bffefdbab646cdc2fb435206f9ff5db2e702b786d1be3c2ee78218ad6a380b42fe2d42ab5932a5fcd8ed78d163e2677406c3810d3eaa3c41369b6fa75b0670ada4df278b70756ac83a5531d0b07556f106858bc5d96bf2d34a02543db33840cc0d6f41c7aa9869b173a3aea0ea0fe74c4ec3a6", 0x88}, {&(0x7f0000000380)="70384c336a7f", 0x6}], 0x6) socket$inet_sctp(0x2, 0x0, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 02:23:22 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$SIOCX25SENDCALLACCPT(r5, 0x89e9) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r1, &(0x7f0000000140)={@val, @void, @eth={@link_local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4b549f", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}}, 0x4e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socket(0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 02:23:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x4000}}}, 0x24}}, 0x0) 02:23:22 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x803, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000200)={0x4, 0x0, 0x57d00b01, 0x2}, 0x10) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockopt$inet6_dccp_int(r2, 0x21, 0x11, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r1, &(0x7f0000000140)={@val, @void, @eth={@link_local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4b549f", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}}, 0x4e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x18100, 0x0) 02:23:22 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003240200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) 02:23:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40110}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x1a, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) [ 3146.423562][T23140] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 3146.447523][T23141] __nla_validate_parse: 6 callbacks suppressed [ 3146.447532][T23141] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3146.502354][ T29] audit: type=1804 audit(1595471002.828:4871): pid=23150 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir464691444/syzkaller.RbUOvR/3399/memory.events" dev="sda1" ino=16044 res=1 [ 3146.549334][T23143] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 3146.595907][ T29] audit: type=1800 audit(1595471002.858:4872): pid=23150 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=16044 res=0 [ 3146.707278][ T29] audit: type=1804 audit(1595471002.858:4873): pid=23150 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir464691444/syzkaller.RbUOvR/3399/memory.events" dev="sda1" ino=16044 res=1 [ 3146.735377][T23143] device bond17 entered promiscuous mode 02:23:23 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000), 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x20}}, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r3, 0x0, 0x100000002) [ 3146.756843][ T29] audit: type=1804 audit(1595471002.958:4874): pid=23185 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir464691444/syzkaller.RbUOvR/3399/memory.events" dev="sda1" ino=16044 res=1 [ 3146.783222][ T29] audit: type=1800 audit(1595471002.978:4875): pid=23150 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=16044 res=0 [ 3146.817075][ T29] audit: type=1804 audit(1595471002.978:4876): pid=23185 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir464691444/syzkaller.RbUOvR/3399/memory.events" dev="sda1" ino=16044 res=1 [ 3146.900921][ T29] audit: type=1804 audit(1595471002.988:4877): pid=23185 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir464691444/syzkaller.RbUOvR/3399/memory.events" dev="sda1" ino=16044 res=1 [ 3146.914597][T23149] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3147.079970][ T29] audit: type=1804 audit(1595471003.398:4878): pid=23209 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir464691444/syzkaller.RbUOvR/3400/cgroup.controllers" dev="sda1" ino=16044 res=1 [ 3147.293424][T23152] device bridge376 entered promiscuous mode [ 3147.340737][T23152] bond17: (slave bridge376): making interface the new active one [ 3147.358920][T23152] bond17: (slave bridge376): Enslaving as an active interface with an up link [ 3147.376472][T23156] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3147.702562][T23149] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 02:23:24 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r1, &(0x7f0000000140)={@val, @void, @eth={@link_local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4b549f", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}}, 0x4e) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = accept$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @local}, &(0x7f0000000240)=0x10) ioctl$EXT4_IOC_GROUP_ADD(r6, 0x40286608, &(0x7f0000000280)={0x1000, 0x4, 0x6, 0x6, 0x3, 0x4}) sendmsg$NFT_BATCH(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8}]}], {0x14}}, 0x7c}}, 0x0) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0x1000000c8) socket(0x0, 0x0, 0x0) ioctl$int_out(0xffffffffffffffff, 0x3, &(0x7f00000002c0)) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) [ 3147.776996][T23157] device bridge377 entered promiscuous mode [ 3147.785592][T23143] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 3147.814423][T23214] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:23:24 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) socket(0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendfile(r2, r0, 0x0, 0x3) r3 = socket$inet(0x2, 0x6, 0x1) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f00000017c0)=0x3, 0x4) socket$inet(0x2, 0x0, 0x0) socket(0x0, 0x0, 0x0) sendfile(r2, r0, 0x0, 0x4000000) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda, 0x6e01}, 0x3f00) [ 3147.838000][T23213] netlink: 'syz-executor.2': attribute type 9 has an invalid length. 02:23:24 executing program 1: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) socketpair(0x25, 0xc0004, 0x401, &(0x7f0000000140)={0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000004740)={r2, 0x1}, 0x8) 02:23:24 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001700)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB="b511ca1d57a24500e1d5dea0405024a8a29e7b01b2999b372c7982af1531e2121c13b9d99449bce97e03c9233da56d3ce9058703c85ae9c8a01079f8715d7a4c8a789942bfa5511ca5a44aae56203be433f43aaddf527c47d8ae3cefdde104a8a37b1d79658fc1e87c05a2e5458ed661"], 0xb8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8}]}], {0x14}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000000000000000000000000000000a20000000000a01000000000087a3db98000000000900010073797a300000000084000004000a8381933a000000000000000000000900010073797a30000000000c00024000200000000000032e000240"], 0x1}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 02:23:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x4800}}}, 0x24}}, 0x0) [ 3148.078673][ T29] audit: type=1804 audit(1595471004.398:4879): pid=23246 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir464691444/syzkaller.RbUOvR/3401/cgroup.controllers" dev="sda1" ino=15949 res=1 02:23:24 executing program 1: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) socketpair(0x25, 0xc0004, 0x401, &(0x7f0000000140)={0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000004740)={r2, 0x1}, 0x8) 02:23:24 executing program 3: connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@nat={'nat\x00', 0x3c1, 0x1, 0x1f8, [0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"]}, 0x270) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=[@iv={0x0, 0x117, 0x2, 0x0, "15dc91768c78ba00960b7a5e4e7907526d7c7c8aee968a562b00cb905e1826a8f9ee0ac480576a7134801fc070041984c5c23fa0f93b59075853f70545ce9c61b15ff65cde5078b4209217f0220f0810f739bd470d405272edb16434a11869d08d8fef065de94710ee553b410c3c02a96c156836af8d11c4af4a77e766f9ed8ec43830fe02bb22babf9b41d4e5027b49ba3f720465bf4ee9b63892030f4fea97d94bc6cd1a7d4d6869cb3185e5da3ca0da"}, @op, @assoc, @assoc, @op, @op]}], 0x4924924924924b3, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="675a92633431973d401686849a0c5720", 0x10) 02:23:24 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@empty, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000500)=ANY=[@ANYBLOB="e00000027f0000010100000002000000e0"], 0x18) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00'}) socket$nl_route(0x10, 0x3, 0x0) [ 3148.396332][T23253] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3148.483610][T23272] xt_ipvs: protocol family 7 not supported [ 3148.497498][T23256] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3148.515823][T23260] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:23:24 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003250200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) [ 3148.658282][T23290] netlink: 'syz-executor.2': attribute type 9 has an invalid length. 02:23:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000082304234e610010806600000000000", @ANYRES32=0x0, @ANYBLOB="000000004000000008001b0000000000"], 0x28}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) write$binfmt_elf64(r4, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0x1732) r5 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r5, 0x8982, &(0x7f0000000300)) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTALL(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x108010}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r6, 0x801, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x20040000) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r6, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x22}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004010}, 0x4000) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c080}, 0x8450) 02:23:25 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r1, &(0x7f0000000140)={@val, @void, @eth={@link_local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4b549f", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}}, 0x4e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socket(0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$SIOCGIFMTU(r5, 0x8921, &(0x7f00000000c0)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f00000001c0)={0x2, 0x101, 0xca03fdb, 0xfff}, 0x10) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 02:23:25 executing program 4: pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8}]}], {0x14}}, 0x7c}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000000c0)={r3, 0xf77, 0x6, 0x8}) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000140)={0x1, 0x3, [@broadcast, @dev={[], 0xa}, @multicast]}) connect$inet(r2, &(0x7f0000000300)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x10003, 0x4) [ 3149.492870][T23256] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3149.579066][T23301] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3149.669626][T23325] netlink: 'syz-executor.2': attribute type 9 has an invalid length. 02:23:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x900}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x54) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xffd7) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001940)=@can_delroute={0x1c, 0x19, 0x800, 0x70bd25, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8, 0xa, r5}]}, 0x1c}}, 0x0) 02:23:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x4c00}}}, 0x24}}, 0x0) 02:23:26 executing program 4: setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x58) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8}]}], {0x14}}, 0x7c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8}]}], {0x14}}, 0x7c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8}]}], {0x14}}, 0x7c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8}]}], {0x14}}, 0x7c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8}]}], {0x14}}, 0x7c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[@ANYRESHEX=r8, @ANYRESDEC=r6, @ANYRES64=r3, @ANYRES64, @ANYRES16=r6, @ANYRES16=r4, @ANYRESDEC=r1, @ANYRES64=r5], 0xfffffe3e) r9 = openat$cgroup_ro(r2, &(0x7f00000000c0)='devices.list\x00', 0x0, 0x0) ioctl$SIOCX25SCALLUSERDATA(r9, 0x89e5, &(0x7f0000000100)={0x5f, "073c5af41f3b83a5841a24aa7b7976e2b7f580c0e7fc05cdeb8f9def32167741964ddd68a0d0a71ec7e7a789aef14e0c8f76b29600e1dcca024b2213d4b855b6f70d0fbc891cbb68186731c865c415af9c3b1ee4717367b98fd6789b926607ef8dfa93423e97c7faa16acdf799a9b15f7c3a4f285fc8b2538eef23325e36c25a"}) r10 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r10, &(0x7f0000847fff)='X', 0x20848000, 0x0, 0x0, 0x0) [ 3150.037694][T23343] device bond11 entered promiscuous mode [ 3150.075477][T23347] device bridge69 entered promiscuous mode 02:23:26 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0xf) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f00000000c0)={0x7e, 0x1}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'macsec0\x00', {0x7, 0xfffe, @rand_addr=0x64010101}}) write$tun(r1, &(0x7f00000001c0)={@val, @void, @eth={@link_local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4b549f", 0x2c, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@synack={0x1e, 0x10, 0x7, 0x2, 0x3, 0x3, 0x7e9}, @sack={0x5, 0x6, [0x3]}]}}}}}}}}}, 0x66) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socket(0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) [ 3150.094058][T23347] bond11: (slave bridge69): Enslaving as an active interface with an up link 02:23:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x13) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYRESDEC=r0, @ANYRES16=r0, @ANYBLOB="00082cbd7000ffdbdf250800000008000800ac1414bb0800000000000000880000000000000000000000000001080004000300000008020000001e000106000b0002000000000000000200000014000500fe8800000000000000000000000000018cbbab1199a81c4049039f4f77e39b7ce627935f052ded8ff47ad180d6516311cbc489eeec52cc5ba8283c1a30fafe090065eb33825d7325bc68b6091b488449bed901233703ff0d05c38b14a9f84723a4535b32c573f6d19d8ad940dc829b1ff79acd89f5c7e383e9129a92cbe53f"], 0x6c}, 0x1, 0x0, 0x0, 0x4004000}, 0x20044040) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="2488705c70b237b289b961a9914374aea1ff0f0001", @ANYRES16=0x0, @ANYBLOB="100026bd7000fbdbdf250600000008000c000000000008000800ac1414aa"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40) r1 = socket(0xa, 0x1, 0x0) close(r1) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x83, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @broadcast}], 0x55) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB, @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={r3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000003c0)={r3, @in={{0x2, 0x4e2a, @loopback}}, [0x100000000018c, 0x3ff, 0x4, 0x3, 0xfffffffffffffffd, 0x80000000, 0x203, 0xffffffffffff8000, 0x2000000009, 0x6, 0x7, 0x2, 0xffffffffffffffff, 0x4, 0x1b225ab]}, &(0x7f0000000040)=0x100) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0xa, 0x1, 0x0) close(r5) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x83, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x110, r5, 0x1ec32000) ioctl$sock_inet_tcp_SIOCATMARK(r5, 0x8905, &(0x7f0000000000)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ec000000100001082cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000001000014002b8008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="b80018806400018008000200262e2a00170002006367726f75702e636f6e74726f6c6c657273000014000400f2928a389522410e04f3f8066343973d0500060040000000080001000900000014000400c18a131349317e276cb3323f6bec5b6b080001008f3100002800018014000400d0b8b7babffdb20bf384347b8f998c2508000100fcffffff08000100020000002800018007000200252d00001414050075a7a37d663dbcea050624cabf0bcbbe08000100ffffffff"], 0xec}}, 0x0) 02:23:26 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003260200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) 02:23:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x15, 0x10}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000040)={@multicast2, @multicast2, r4}, 0xc) [ 3150.277475][T23404] netlink: 'syz-executor.2': attribute type 9 has an invalid length. 02:23:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x5865}}}, 0x24}}, 0x0) 02:23:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={&(0x7f00000000c0), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@bridge_getvlan={0x58, 0x72, 0xa01, 0x70bd2b, 0x25dfdbfd, {0x7, 0x0, 0x0, r7}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x58}}, 0x8041) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r9, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000e1c7f5947901d5ab840000eb9082085b65edbba9001df48eead5f14ea652f8b9ff00f6", @ANYRES32=r9, @ANYBLOB="0000000000000000000000000b000100666c6f7765720000180002001400020069703665727370616e30000000000000"], 0x48}}, 0x0) 02:23:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r2, 0x301}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20880241}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"/1505], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) [ 3150.857402][T23404] netlink: 'syz-executor.2': attribute type 9 has an invalid length. 02:23:27 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000240)={0xffff, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xcb, &(0x7f0000000000), 0x3) 02:23:27 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000010000104000002000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r7}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x7a00, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x8009}}, 0x20}}, 0x0) [ 3151.133804][T23465] IPVS: ftp: loaded support on port[0] = 21 02:23:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x6000}}}, 0x24}}, 0x0) [ 3151.243148][T23465] lo speed is unknown, defaulting to 1000 [ 3151.275231][T23468] bridge59: port 1(bridge_slave_0) entered blocking state [ 3151.282459][T23468] bridge59: port 1(bridge_slave_0) entered forwarding state 02:23:27 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=[@iv={0x0, 0x117, 0x2, 0x0, "15dc91768c78ba00960b7a5e4e7907526d7c7c8aee968a562b00cb905e1826a8f9ee0ac480576a7134801fc070041984c5c23fa0f93b59075853f70545ce9c61b15ff65cde5078b4209217f0220f0810f739bd470d405272edb16434a11869d08d8fef065de94710ee553b410c3c02a96c156836af8d11c4af4a77e766f9ed8ec43830fe02bb22babf9b41d4e5027b49ba3f720465bf4ee9b63892030f4fea97d94bc6cd1a7d4d6869cb3185e5da3ca0da"}, @op, @assoc, @assoc, @op, @op]}], 0x4924924924924b3, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f00000000c0)={0x6, 0x5, 0x20, 0x9, 0x5, 0x7, 0x3, 0x4, 0x7, 0x1, 0x3d, 0x2, 0x7, 0x6}, 0xe) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r1, &(0x7f0000000140)={@val, @void, @eth={@link_local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4b549f", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}}, 0x4e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socket(0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "2128ff90f8c53eba", "cf83b9a93f9079b6ddf4fd6f38c416bc437b129c2cdc958a9e95b441230b744c", "f8f46b78", "2cbfeefe7af46fc4"}, 0x38) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 02:23:27 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003270200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) 02:23:27 executing program 4: unshare(0x40000000) setsockopt(0xffffffffffffffff, 0x43, 0x98b, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000400)=@assoc_value, 0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5c7, 0x5}, 0x90) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r3, 0x0, 0x0) sendmsg$alg(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40}, 0x4000000) sendmsg$nl_netfilter(r1, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000020301032bbd7000fddbdf2503000002c6cd0b20d072526ef07e2436ba3459a58a2106334fd77c722f6f79ea68529ef92b64a2922038947a21deb6b10000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x2004c080) splice(r4, 0x0, r2, 0x0, 0x400fffe, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x1, 0x7, 0x1, 0x5, 0x5}, &(0x7f0000000180)=0x14) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000600)={{{@in=@dev, @in=@loopback}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000440)=0xe8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x82, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x80000000}, 0x0) socket$inet6(0xa, 0x0, 0x0) [ 3151.474112][T23489] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 3151.497650][T23483] __nla_validate_parse: 16 callbacks suppressed [ 3151.497660][T23483] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3151.546881][T23475] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3151.572022][T23490] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3151.634125][T23499] IPVS: ftp: loaded support on port[0] = 21 02:23:28 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') r2 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="070019d9", @ANYRES16=r1, @ANYBLOB="0b3e0000000000000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x6000000000000000}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f00000000c0)=0xc) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r1, 0x30a, 0x70bd2e, 0x25dfdbfd, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20040010) socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0x18c, r1, 0x20, 0x70bd26, 0x25dfdbfb, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5, 0x83, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5, 0x83, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5, 0x83, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5, 0x83, 0x1}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x7}, &(0x7f0000000140)=0x8) r4 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000300)=@ccm_128={{0x303}, "c32f3329cd3395e0", "1a564826705f5c19eb650c9696e4a377", "b5a8fee9", "71843f05a7d0001f"}, 0x28) setsockopt$inet6_int(r4, 0x29, 0xd0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12) syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/time\x00') [ 3151.865164][T23511] IPVS: ftp: loaded support on port[0] = 21 [ 3152.033217][T23465] lo speed is unknown, defaulting to 1000 [ 3152.033249][T23481] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3152.064509][T23466] IPVS: ftp: loaded support on port[0] = 21 [ 3152.178176][T23511] lo speed is unknown, defaulting to 1000 [ 3152.187377][T23490] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:23:28 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x15, 0x6, 0xab) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88c82, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000000000180c2000000aaaaaaaaaaaa86dd604b549f0014060000000000000000000000000000000000fe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a75cd75d4b055061def950bf701e1ab3bafe9de816038fa0a1c0d3b54522c348609177aca25a40fdd7f20e837ba4107e3e0342d856b4329d163518d8547d1c54d88cd0018a6ea3a54a4177ed1ccef5f7fb624197098f875196c4ac413f70db863174613b3a6e153ee0679bc828969d12788ec4003a59fe9869502c5412e9dda6473abb15b1b80000000000"], 0x4e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000001c0)={0x0, @vsock={0x28, 0x0, 0x2710, @my=0x0}, @ipx={0x4, 0x8000, 0x601f, "22d947012b2d", 0x88}, @tipc=@name={0x1e, 0x2, 0x3, {{0x2, 0x3}, 0x3}}, 0x23, 0x0, 0x0, 0x0, 0x9330, 0x0, 0xfff, 0x80, 0x7}) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) [ 3152.272049][T23489] netlink: 'syz-executor.2': attribute type 9 has an invalid length. 02:23:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x6558}}}, 0x24}}, 0x0) [ 3152.505273][T23507] IPVS: ftp: loaded support on port[0] = 21 [ 3152.735476][T23552] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3152.783693][T23554] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3152.797171][T23557] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3152.822887][T23555] IPVS: ftp: loaded support on port[0] = 21 [ 3152.860571][T23511] lo speed is unknown, defaulting to 1000 [ 3152.910062][T23499] lo speed is unknown, defaulting to 1000 [ 3152.942487][T23552] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 02:23:29 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003280200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) [ 3153.015013][T23557] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3153.102875][T23596] netlink: 'syz-executor.2': attribute type 9 has an invalid length. 02:23:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x662a}}}, 0x24}}, 0x0) 02:23:29 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = accept4$x25(r4, &(0x7f00000000c0), &(0x7f00000001c0)=0x12, 0x80000) ioctl$FS_IOC_ENABLE_VERITY(r5, 0x40806685, &(0x7f00000002c0)={0x1, 0x1, 0x1000, 0x4e, &(0x7f0000000200)="b2c2e3df179e062c40b2477ab3482ab279c2bd1267a31c33ecac804fe2bf3502661277c004306c05856e9e29c77e33536ee02532382ccfc4939c5e4be58f5458e362707f422b0c9e66d29e82da9c", 0x25, 0x0, &(0x7f0000000280)="77ef9bd25fdc1eb852ad205307d7d0ffaa08cab56cd7e4a1b0c5a4241b64921caec3ce7b7e"}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000180c2000000aaaaaaaaaaaa86dd604b549f0014060000000000000000000000000000000000fe800000000000000000000000000faa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x4e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socket(0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) [ 3153.620236][T23596] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 3153.670891][T23499] lo speed is unknown, defaulting to 1000 [ 3153.670977][T23466] lo speed is unknown, defaulting to 1000 [ 3153.684786][T15325] tipc: TX() has been purged, node left! [ 3154.106129][T23555] lo speed is unknown, defaulting to 1000 [ 3154.396727][T23466] lo speed is unknown, defaulting to 1000 [ 3154.424316][T23555] lo speed is unknown, defaulting to 1000 02:23:35 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8}]}], {0x14}}, 0x7c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8}]}], {0x14}}, 0x7c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[@ANYRESHEX, @ANYRESHEX=r7, @ANYBLOB="d58a85bff7376d7cf40005398538b4f43d067e791a2524673a9d86d99ff9ddab2af97d7fc8cfcd918c34e7c3a212880bc34f6f2b0035b518a2ad2c1000879584198dd88eb0f9b5a791d4370a2e56f317df7e3138b29633bfcc8912ed91970b7cec415cf48e47b2a2a5ccd3c8aaae68e1bc7b7028afe43e7882eb726fbcf8a45fcd12c8e7b0a355e67dd7f7f14c35e47dd919be0a8cd395868f1b5c22d9deb00035532473d180945113d2a90ba6e1fe8ec089102a37efaec864c092783f4487853b1f8f47", @ANYRES16=r7, @ANYRES16], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:23:35 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a0003290200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) 02:23:35 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x8000}) r5 = socket$netlink(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r1, &(0x7f0000000140)={@val, @void, @eth={@link_local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4b549f", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}}, 0x4e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socket(0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x20044080) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000200)={0x40, 0x16f, 0x3, 0x0, 0x0, [{{}, 0x16}, {{}, 0x3}, {{}, 0x9}]}) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 02:23:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x6800}}}, 0x24}}, 0x0) 02:23:35 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) sendmsg$NFT_BATCH(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8}]}], {0x14}}, 0x7c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWSET={0x43c, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_DESC={0x3f0, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x48, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x11f6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6a9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbb}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_DESC_CONCAT={0x6c, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x20}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x504}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff20}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x31e}]}]}, @NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb1e}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_DESC_CONCAT={0x198, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xccb}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe118}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffc00}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8ed1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5ce0}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_DESC_SIZE={0x8}, @NFTA_SET_DESC_CONCAT={0x78, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x20}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x79c9}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}]}, @NFTA_SET_DESC_CONCAT={0x7c, 0x2, 0x0, 0x1, [{0x4}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1c000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffc0}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}]}]}, @NFTA_SET_DESC_CONCAT={0x78, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe3400000}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9cb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x89}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x10001}]}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8}]}], {0x14}}, 0x464}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000040)={'bridge_slave_0\x00', {0x7, 0xfffc, @private=0xa010100}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000000006054000811000000000000000000000000000000000000000000000000000000000000a5ea2badb311e5040890782a92f03380a4be03d05ac500261250b9660e72806775d25fe1d8a31d82a124628cc597f871f7262cd8083fb635fc48641cdbc514f06931e5c116347fe9b98c4332fd651f3daab9b7881b5202e0"], 0x3a) [ 3158.719432][T23737] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 3158.750631][T23742] __nla_validate_parse: 5 callbacks suppressed [ 3158.750642][T23742] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 02:23:35 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x428944, 0x0) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180040002000200ff070007f140a831465fd9ada3c71d82509916620f7eda7ec1f39128f5568f297b5dc4251f7d1d2901c0edc1d786e140f1575d93808f3d947d8c4329b1bd18a9fe4e3e454bc17b335a7642a0d9c2a5aab86fd58cb3d0bb1174c9eb776c6b4164883ea8aacb1c0917e923fd77f34e3974a9f0299981e9b8a8b48e2903d79dc3aa02aef0a9f01aa2c02e"], 0x99) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r1, &(0x7f0000000280)={@val={0x0, 0x200}, @void, @eth={@broadcast, @local, @val={@void, {0x8100, 0x3, 0x1}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @dev={[], 0xd}, @multicast2, @multicast, @remote}}}}}, 0x32) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socket(0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000300)={r5}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={r5, 0xd0e}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0)={r5, 0x2}, 0x8) [ 3158.793965][T23743] IPVS: ftp: loaded support on port[0] = 21 [ 3158.888645][T23749] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. 02:23:35 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8}]}], {0x14}}, 0x7c}}, 0x0) mmap(&(0x7f0000395000/0x2000)=nil, 0x2000, 0x4, 0x50, r2, 0x9a237000) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r3, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) [ 3159.128666][T23771] IPVS: ftp: loaded support on port[0] = 21 [ 3159.329119][T23750] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3159.429553][T23743] lo speed is unknown, defaulting to 1000 [ 3159.580282][T23788] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 3159.582353][T23749] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 02:23:36 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r4, 0x10d, 0xa, &(0x7f000079bffc), &(0x7f0000000200)=0x34) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r5) ioctl$TUNSETGROUP(r3, 0x400454ce, r5) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'gretap0\x00', {0x7, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000000000180c2000000aaaaaaaaaaaa86dd604b549f0014060000000000000000000000000000000028449992000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000907800002ff6114a639dcc8943f68c4dbeb5fe55f7392d"], 0x4e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socket(0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) [ 3159.704823][T23750] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3159.913457][T23772] IPVS: ftp: loaded support on port[0] = 21 [ 3160.177573][T23743] lo speed is unknown, defaulting to 1000 [ 3160.179979][T23771] lo speed is unknown, defaulting to 1000 [ 3160.189303][T23747] IPVS: ftp: loaded support on port[0] = 21 02:23:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x6c00}}}, 0x24}}, 0x0) 02:23:36 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000200), 0x9f7565b8fab29340) write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="954eca055c1d2a3b5283bc9f13dd10f09766103c9275f40a1f7bfd45e78780e63480b3b4046ebd143b41d6d5a892c7938fd2fa31a8adade7703e3815a7d322dc3c183d744fff6e09a0e4239356b9ec2f3d1c957441ee14c6514a0c73f6a39764cd09225e74b167e2f82233f8b626f4f72202a50c2b000b001239dc037dc7bf6aa417a7750746ce004e1db6a9fbbfaf18622beeaf7bcbe18a1431fe476086e4be12d6f76a22de569e8a6b48c2877fec58005fd5c4ffd117057f5babed5fb2150f11ab0238c53e4b1fa80c43b26df0d49a40706cde368a95fd7a17e9210af38bfb95bdacd48a9eb743aa496646e6a901864510bc9870c936e12001693f8ec2dc9c6f190b20bc9a1d5fa7baffbf206d7e68640b9e63fc4c70721744b6798be66d7a39e3b4d05bc513eaea7bd61d414fa6d4805cbd0270dba51ee475b52d4c3e288984191b0964b78f007e9ab11c3d4020c9030721e0117e"], 0x0) write$binfmt_misc(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x7) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r6 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001780)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00002bbd7000fddbdf250a9ba400080004000c040000040003801800028014000100ff0200000000000000000000000000010800050000feffff0800060000000000"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 02:23:36 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a00032a0200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) [ 3160.377969][T23841] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 3160.387356][ T29] audit: type=1804 audit(1595471016.698:4880): pid=23840 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir464691444/syzkaller.RbUOvR/3407/memory.events" dev="sda1" ino=15997 res=1 [ 3160.443593][T23842] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3160.495572][ T29] audit: type=1800 audit(1595471016.698:4881): pid=23840 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=15997 res=0 [ 3160.588674][T23854] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3160.625966][ T29] audit: type=1804 audit(1595471016.718:4882): pid=23840 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir464691444/syzkaller.RbUOvR/3407/memory.events" dev="sda1" ino=15997 res=1 [ 3160.721629][ T29] audit: type=1804 audit(1595471016.868:4883): pid=23857 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir464691444/syzkaller.RbUOvR/3407/memory.events" dev="sda1" ino=15997 res=1 [ 3160.956702][T23856] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3161.039793][T23772] lo speed is unknown, defaulting to 1000 [ 3161.050152][T23771] lo speed is unknown, defaulting to 1000 [ 3161.073396][T23841] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 3161.103378][ T29] audit: type=1804 audit(1595471017.428:4884): pid=23840 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir464691444/syzkaller.RbUOvR/3407/memory.events" dev="sda1" ino=15997 res=1 [ 3161.143207][T23842] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 02:23:37 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r1, &(0x7f0000000140)={@val, @void, @eth={@link_local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4b549f", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}}, 0x4e) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x74, 0x0, 0x2, 0x70bd25, 0x5, {}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x33}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x1}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5, 0x11, 0x1}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x4}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_IFINDEX={0xffd8}, @NL80211_ATTR_WIPHY={0x3, 0x1, 0xffffffffffffffff}]}, 0x74}, 0x1, 0x0, 0x0, 0x8004}, 0x4095) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8}]}], {0x14}}, 0x7c}}, 0x0) ioctl$FS_IOC_SETFSLABEL(r5, 0x41009432, &(0x7f00000001c0)="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") socket(0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) [ 3161.192037][ T29] audit: type=1800 audit(1595471017.428:4885): pid=23840 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=15997 res=0 [ 3161.272355][T23203] tipc: TX() has been purged, node left! [ 3161.421507][T23856] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3161.470863][T23772] lo speed is unknown, defaulting to 1000 [ 3161.470887][T23747] lo speed is unknown, defaulting to 1000 02:23:37 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000200), 0x9f7565b8fab29340) write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="954eca055c1d2a3b5283bc9f13dd10f09766103c9275f40a1f7bfd45e78780e63480b3b4046ebd143b41d6d5a892c7938fd2fa31a8adade7703e3815a7d322dc3c183d744fff6e09a0e4239356b9ec2f3d1c957441ee14c6514a0c73f6a39764cd09225e74b167e2f82233f8b626f4f72202a50c2b000b001239dc037dc7bf6aa417a7750746ce004e1db6a9fbbfaf18622beeaf7bcbe18a1431fe476086e4be12d6f76a22de569e8a6b48c2877fec58005fd5c4ffd117057f5babed5fb2150f11ab0238c53e4b1fa80c43b26df0d49a40706cde368a95fd7a17e9210af38bfb95bdacd48a9eb743aa496646e6a901864510bc9870c936e12001693f8ec2dc9c6f190b20bc9a1d5fa7baffbf206d7e68640b9e63fc4c70721744b6798be66d7a39e3b4d05bc513eaea7bd61d414fa6d4805cbd0270dba51ee475b52d4c3e288984191b0964b78f007e9ab11c3d4020c9030721e0117e"], 0x0) write$binfmt_misc(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x7) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r6 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001780)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00002bbd7000fddbdf250a9ba400080004000c040000040003801800028014000100ff0200000000000000000000000000010800050000feffff0800060000000000"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 02:23:37 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a00032b0200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) 02:23:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x7400}}}, 0x24}}, 0x0) [ 3161.703025][ T29] audit: type=1804 audit(1595471018.028:4886): pid=23935 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir464691444/syzkaller.RbUOvR/3408/memory.events" dev="sda1" ino=15909 res=1 [ 3161.731566][T23933] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 3161.752403][ T29] audit: type=1800 audit(1595471018.058:4887): pid=23935 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=15909 res=0 [ 3161.813108][ T29] audit: type=1804 audit(1595471018.058:4888): pid=23935 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir464691444/syzkaller.RbUOvR/3408/memory.events" dev="sda1" ino=15909 res=1 [ 3161.932022][ T29] audit: type=1804 audit(1595471018.258:4889): pid=23954 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir464691444/syzkaller.RbUOvR/3408/memory.events" dev="sda1" ino=15909 res=1 [ 3162.101156][T23747] lo speed is unknown, defaulting to 1000 02:23:38 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r1, &(0x7f0000000140)={@void, @val={0x1, 0x0, 0x101, 0x7, 0x2, 0x8}, @llc={@llc={0xfc, 0x1, "25d9", "42b289789136060959de011e3991cf22d07b8d59014c0870b1dd2b1c19e14742cd881ddf710349fdc5a033fa47d99868d4dd85bed1287ea287cdb5992cf5327bef244dc792d302df23f94a3d838ac158ee3174a03a0970e1ebdc46effcdafd4dd66521063a824ed198fbb0a874"}}}, 0x7b) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000006, 0x110, r5, 0x100000000) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socket(0x0, 0x0, 0x0) getsockopt(r4, 0x0, 0x4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) [ 3162.204526][T23933] netlink: 'syz-executor.2': attribute type 9 has an invalid length. 02:23:41 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6(0xa, 0xa, 0x4) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) 02:23:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x7a00}}}, 0x24}}, 0x0) 02:23:41 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x81}}], 0x60}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4c0c0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000025000511d21480648c63940d0424fc6004000e000a0003000200008037153e370a00178000000000d1bd", 0x2e}], 0x1}, 0x0) 02:23:41 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a00032c0200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) 02:23:41 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r1, &(0x7f0000000140)={@void, @void, @eth={@link_local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4b549f", 0x14, 0x6, 0x0, @empty, @initdev={0xfe, 0x88, [], 0x1, 0x0}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}}}}}}}}, 0x4a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socket(0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 02:23:41 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a00032b0200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) [ 3165.069872][T23203] tipc: TX() has been purged, node left! [ 3165.099412][T24011] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 3165.108338][T24010] __nla_validate_parse: 5 callbacks suppressed [ 3165.108348][T24010] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3165.298616][T24023] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3165.341239][T24010] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3165.377812][T24012] netlink: 'syz-executor.3': attribute type 23 has an invalid length. [ 3165.419348][T24023] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 02:23:41 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="38ff72ed3bffa2a300", @ANYRESDEC, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x20000080) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000514000000000000000000000000d57b1c635e7003192021455733a65cbbd69c2e474db8", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468368b8044bcabeb0c2f6e508bca2771f1bff8f42119b532dae1e0ab1ba1ab3231c89e1940430526aed096c85e79165f59ed5e5b0981e814c91d14ee5956b1e941ba3b7c9358c345bc51471068c75812cc12fba20ee60e88c568c3c9ff41f1e8fa44ba92c855cd264d9741c9af46248ecc2a99f870cf4878c4a770027ab0ddf7448d420a6b801b4f68f7"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="00008000000000000400f1ff0b000100666c6f776572000004000200"], 0x34}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'ip6tnl0\x00', r6, 0x2f, 0x3, 0x20, 0x6, 0x20, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80, 0x8, 0x81, 0x7}}) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x11c0, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x1190, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x5e}, @TCA_ROUTE4_ACT={0x1174, 0x6, [@m_mirred={0x1170, 0x13, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0x144, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x1, 0x10000000, 0x5, 0x4366}, 0x3, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x572, 0x0, 0x6, 0xffffff01, 0x1}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x200, 0x6, 0x6, 0x8, 0x2}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x5d, 0x5, 0x0, 0x8}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x398b, 0x10000000, 0x20, 0x6}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x1ff, 0x10000000, 0x8e2, 0x4}, 0x3, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x40, 0x4, 0x7ff, 0x6}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xd6, 0x10001, 0x2, 0x20, 0x256}, 0x4, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0xa28, 0x6, 0xfffffffd, 0x6}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x400, 0x0, 0x7, 0xe6}, 0x6}}]}, {0x1004, 0x6, "4b9a42cc0b9c7444eea2b7243d5bd630259bc96cc4678bd92a6d01e7e637a77ed5cb5f24e20b5bcb05413f04f8172457eb91eee2a369ee271f4bf7850a6304f78f98e0d2d1f3c5036e1fa42ec552a242d123c3c87bbfc2ea939d853edc3b2994817a2d4c54c39aa0b26c654a06fd782aba797943fcd16b0c69d3e8fa0123dced9cb712a34813ceaef4cea575ccf470974d736c6e660e25fd1bcf90aa66e58c6a94fae99526a052574f04a8c2b57c2dfacddb37ae9a452ce6a4634661a50251b62c35ef640da02f9a4a12005995ccf9c55b7b0be0c9d33e90f57a56b05553a42a1e156a5a5a3e5a35a1ed4e54b13c28fbef307c2d1f4ebc8f641b2ec011582fdb608ff8e2725f873e9f24fe3975324d3ae596e3274b86c21a582d6eb17f298e1650da323e6b93ac858167c98d1788a970fbe67bef88d6efede548ab3683449a18453eb3eacc65fe55d3e541d4d06308ae46a0973984936f7384dcd6109870e274e8df1b4d4fc3ff3dcf1550807037ca3f7af2d5d8bb05ece4612582462dc8b408872fa1d289e60ed8433f6876444c7a9ad25ff14ca7c735876a39eda705785bbedfa510601cf83eb42ea71d558d29d3f165480959805ba3dac92f18024f0acad15a59704cb2be9015418b3a0047e44dda2bc14ccf261488674f1552779a5f348ffc94bc4f161dd45213574f1c7c8797e76592fef94eab00de28a16542c76c12f4dac0b7e6d0b3e9afe278bd25e436ff02efcf5b749ac4dfdb505e6fc60335454370d78a6cbc34b0dbefb1769a98a081d26b4d0f0edd0ad7084d80ce9417df623a90c1718612b8b6006098dcb09422066466c2b0f9fb0e6b1df4c78d41b427045349886ca2d5f8d75e163b01146c6fa10710b24be0b5da9c29abd0fd36b718b69f0bda16b7e417d1f126a1297a5d5220a0997611453c780d2d233bc572da48430932b331c2406ccaa3a60f67b2f9a8ba2ce2a26d8b20dee2d151b4e5f990b6bd556c93945d1c1afc56462e7a1effc734854ad39d6c1e1dcbf9e82a863b2423d1ea913e6594e2f5c27d36f58b1e6b0bf681026802225e3b1aef22a401b60109f12ce14e28259aa00350e2d0631bbef567e0cf116e512cfd998d1229da632835ed2b38df346814c95e29ee50b70493fdfba0bf7bb8533ffac5a5564561cbed3dca9fe7d5a7694c384078f59bd57fd040da516a0dee91d4ce481b1c8e58ee08c4fd66f45fa42259834c0b41f30102730161e9ea2cb0b72997132f8c84ec803efa85f1e242f0b773625f1d91745d14bf6088b18587ca9f8dd304b63ad2d7adbff86a66de4d61ddab3acde013650f95d6e2f789a9c9ecb655b0df4f807d200023dc1ca20cfef0bd4e1f1cb1e7a13456315bf63847416c506208ff5d7bc875a7e7b4d0bcb4eca627522cf60e3951a1ca879ebea449838b0c5c187c2db6239c9096c7cad62612c91f1a9cf048963ffa8fdfd5fb5675eba8a8813d7bcc7ffbd3b22589c6c13a405e2010bd12db194c292247750f18ed85ae5b7d9d31ae3f40c85264c88cf7357bcbce70144dd9fda662de5285242f32e6cff6154d16681a5bdd9cece335b41121f4bf44bd7d2a93d9b33d2408c6ec364fd43ee6395f9c6ab0ba0437b945d2c074996cecd97302e1021e8520bfccf13ff151cec24a6aac9e5f0975f4219b1972f60ddc5744d4654f17826bcfc65dd0288e475ceb1657c2a8a0a7c3bcda364112166cc2ae2d0ff68a81918c6fc5e32d5558dfa597eb49c782e4d8ec6ee7fa01125ef9506833fa25fea543d3f908546933c532e29f605a1a49fec47b13caa7f0577b45cb7927bc223d1ed6963851f3ac79949ee9fdfd6d42fc7c398b469d2a67ea0a48c5c37d94c1fbfa1ad27a5a0e1095d8ac7c3edbb6fb05a0884d461960a157531a9151401b67a4ca5f345d5a498e60379d2a0a8b036f7eff5c64e743b1067e5a0b6996189ef9397e779c9153c304c6807320bcdd4b90536e3ddb721134ffcc6bb7e80845634ded21b54e01335a044e78c7d967b27fc94842ce0cc2ea5fb4c7e65b9e0702c35f4873dfd9b5cf7306266088e1ab9f5ff0f3a8058b2fcc2c5130ccb1a0e0382198b5a9a31bc51ec3216dc2cd965ac25d9b7a7602d086f5b6c56f450f5307f709db3ce0f8984df7988089dcfd87246dea35f7d55303cb646e33b794a3dd1d6d416e7f59939a5e0b5451b944329b7b58763da05d1ef97355f300ab6951ec0919af55e331d26ae63dd571a9565aabcec2da108a70a201874a16c3fd3bffffa934eaf04ca66b10ec04bdaa24e25f76a9cd6dd18b415bf6fb27316fa12956b8c6fad39aaf788f3c39e39a26f127038ca711e41ef50c309c255715fe4524a183decfb965dd7d918451822a21847ac7358639f3a28eb57419168d2a8f80194638edb48b7d6faa212191e71a919a96dc70ec1d6adebb2610cbbceb8385281a20cc9f28caf3caa7e52a93f6b963a0040b97da3fd48c4970addad40bf08395072fba6fcdc53e9e99fb228f53e6f5b7c114d19e71a4a73a4555edb9e8100b7796b954ccf9d23a4d7a4123c9293597c2fef18ff37530e90f271c5074944c66682606e1c98a4e00bf31ea8ebe568249588b0ee8d853e13139bc1d4152e13ee8cfa3a7c3dec9e8d9b6ce449b0adbb44a892f1e9f5f044f34ee10227fdb94f415266aadd89d66f0abf061d79347efd4aa033f1354b5343cd017e803d5d9634a85303aedc6093cd3e0180fdfabf73468abd6f1a0e05f95cbbe0565cbd79eb22481759e0c1875a1a1986deee9d1745f1c8ac71e4451c3f1240a7ccb0e096443ed99eca60073898a17a35c32c2a11f80f04a069b3bdcaaeab91d620783583bc7f585cf58ed13dc3d8cc1adffbeaf0d2e0f3efc5de0966cef960d816ca6be0def08aedc12601bd462d1ec1b1a1e0bbc2cee366bff7864f42be9c6e2520570f0f67a6564739fd1c7150ee592b242e26e37b5ba2936bc60a32726c977c1027183751cf28e67de16dfe12e1d1132546a38ea61c8c5cc2acb30c9fee0af09d210ff780f6bde2c0d3b0ca072ce8d82aa808a2fe6ae5a5806293113a390090f5b4ae93bef8014542c1d6e64892001e953ea12aed4f4db8be5bb89e44c5e50ba1166f50ef765e7d5f14a15498517657175b7db5c5c4863d414b5e6e3732cd9c9e5e5f9a6cfbdb41ed60a4b978cd4820b0747ecff6adfc1ef32a7856ea80db08dcfe8f8357e356ea71f19ac6350969bf38cd4da65e97900968d734dd0e01b772219d43c38bd8f584395cd4bf86c06b8a28d37a52881a344b9834c393f408d132be5dbf640b216518ccc178dbe1fb46dc87c9866aa5a1b696f0b7a109ba25856408d16ed5fbb4bc158f02c2e6865c46372e391c46a6bd3b3a3397c8783896962671f0e5248f5d85e7e21f6c402034b5af02c9b393410d26acfbc01b13d8981f6aad21f15d6954ed56139d0b4801462c2f39d1aa16b84470b233d04704f96c2dd1e2ba5cb5197a497834fc48572bd022d95561b42aa5880950574504e647d732887f0504bd07183b311adb11cd68e638eb05d2dd4cd51d3fdc7728c3e8867a3bc86e1e1ab37859b19aeb63ce3594ec11c8f38c61c61e054260f887eae772256fc66cb2a86fee65e170caf0215ee684d0a60f38e3458c385ad9c9458be7002e9d1c7abf27b93c16d49442d0dd651e29dbfd5cd055be68ab8b28c68770246dc82bbf020b8605c2f29735783e8b79d5d4f5714ef9b45fc9eb7a8a1ef5d1cc476e7310930f181cd1848e613be0dde5970a5838172db3b417f61d8d7e21522aec8e69e5f611d92b39a74450aa18317bf231c34388c4156cb91bf8491c1ddf7da4a8b24c4652090be5d13afe9391de69f6ca7f5318963902c195c70c24e7f8d83526d0cffa55694521636ada34181f1c1330bf5d3087a80317fccdbba3adfc5c0679873e9fb4669c44e652829e4e0f1c8a9698d1070f38f7f2b6127ff6a402030b79f7c2df62ed514c7c72a17599dc8338f87c7721ea787e3474a332cc295e6881b4116ef45ed34041677a384a7e0f04a4485f4d90f97f2e572835d7becb27b7f5e932a8fbec63ada1bf860d1a515da53dc777548c5fa1e4ad530c001cbd0b897b9d47170e92bd3038cf7fa3d6f3b5688ca2e8abf41d51902705c016a60f74c1ee683d1695d691bed58d0eda4ef70d4426236ae1bf8c8c7ecce04e35084b11fb917795cc14f79a11116521775beef465c9fadfd08562a8afb9211b7e865c1a17009cf0f143fdcac860578db92b9138190cfad5d399bde8ba424800669a4f2be7b4329b5c8f21d51167f542d158aef5fd9222a8c10049db1ee0b5988662e552f878a8688b8b53b452724c3e476c3efb2de33e534d24938d92d945dcd9f68a80145a7b70fb8c36977f966fb5be1dedf6c74eca9f2731c1abb85d7143f1510e66857ed010bd5babacf77808c3213b7d00bc9417a226356db271b2e4207e850548cfda9d9de41734cf904a9ed3d6f04e0bf21e5c33565fe1d8497883a948e962dab58729cf636b1bc68db6fb9a12e7736492fbba6599e6fb850a5a50a5d561bf1b6b0c41e26ced45924f715425b66383c4f7c096e8d4b5c94763fc9bff407d2dab4bc44d1b72ef9d7f7a344782575f6441a11158d5181f07a1d2ce7de4fbda7dbc24a766e0dbf562d922518698ba7ecbbb1e1987761410948e8e3d504e6eff381caa96446eff130945b0f01ba42c18314f59c2f80b7111b45685f83958633f55073044b3fe4d929dd8aef6441000e205a6a34509d8a1732439af6c542b596c0a39fd30c5f93eeba85de09ea003d24f602ae11c17b117cc94a3afad8a78b9c54d800c369bda819922befefe3595a618518881b85704bfce8fa2f414fdc1a0004ea69da63fcb27b5233219b0e2bbf3b6f8678f0dd667605cea4a2db5ecd358de1f2b6a7c2e6351864a9926c9e06db026bf64493273a67ecc9f2a3fa27d5442737f1d408517adf767730980337c4fc634228637febce90f80312da68ff46e3856d42630195e6f6aeeb0c6775fdd5823e2e7b1d2480258a05871d19602afcba0f590b75c95af439b1bbaa5aff35ed79a4df39de6a57624e461bbb90ee21b8a3a8832485fe6b3e94f7edc8cb6dd85e273f4677e143b1a9787fb8b481ae706aaba500dfd6ad5d06657d3584591a4bf2583f86207dc1fe9870978c6b73ea6273666c7a268939984933c6b70e715ebebc1e4e8c06b633a89d90f1516b58844cb0f8c30a875e2fd394290e655ff3963cabbef8df705f56845670cf950db8f9af4e41d022d7de66f1e93c31c09d1b226790e0ed5eecbcf822e5498bf38cc5c1aea6ee2b57f8f4ee6c067bda38c3f64de865454808f613b9cb86e0de94fcc7213dcc539391ed81d51ce10442b56cee4921a1745abcb6721ea7ef8566663bb20d7f5a2c9e30e42ce243a7f35e5fab142ea38662f34ba8887e37e840954631ea24be2af44c7e93f6223b0f90481e135ed467472e99ec9e369a8bbcc084710af4b34c271cce1b08c258b2bf68ceac4ada9a18fb129760b2c16e25bf476fc51d672f1f31e14cc150c9e208ed8aa02be87b75a4a534e9816fc2b8b94f5a4f0c206ef5f344ef139f000b02738c77b9cedc5abcc64cbe191e74bbafcd5dac5b510056b9d9f2417e9c7e446cb617442a547417a3f9ed7238d2d0e99fe10365057cfa97f4caf32d35c55fb026b5caffdcb7e37ba81a09087444df13795fb70263d5680446290265493371d176b67e013311b597d54dfc07c21a09dd5f3b92e7d2e657484c16572f564d735e3505dc07e910f9a750145b"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x7, 0xc}}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xffff, 0xc}}]}}]}, 0x11c0}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 3165.651589][T24042] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3165.686021][T24044] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 02:23:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x8100}}}, 0x24}}, 0x0) [ 3165.774045][T24046] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3165.791665][T24014] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 3165.802650][T24056] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3165.856794][T24044] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3165.879082][T24046] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. 02:23:42 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"/363]}, 0x1e3) 02:23:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010000d1700000002ff03000000000090", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012fa0bf79b025e7ac357e89b14dd1ab785f1000100626f60a6b413131ca8df742928cf8514cb67b2a53ff3f79d12e91a0bd0ffe746c4d800"/76], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x4, 0xa, r6}]}, 0x3c}}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8}]}], {0x14}}, 0x7c}}, 0x0) sendmsg$sock(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="b9c55fa64d47e5974869da256a34ddfa774efe0702b4986e26e34129fcab", 0x1e}], 0x1, &(0x7f0000000340)=[@txtime={{0x18, 0x1, 0x3d, 0x80000000}}, @txtime={{0x18, 0x1, 0x3d, 0x1ff}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x2c06}}], 0x60}, 0x400) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}}, 0x0) 02:23:42 executing program 4: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="a2"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0xf8, 0x48, 0xf0, 0xf8, 0x0, 0x208, 0x208, 0x208, 0x208, 0x208, 0x3, 0x0, {[{{@ipv6={@remote={0xfe, 0x80, [0x0, 0x0, 0x74]}, @dev, [], [], 'ip6gretap0\x00', 'vxcan1\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@ipv6={@mcast2, @loopback, [], [], 'ipvlan1\x00', 'caif0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=[@iv={0x0, 0x117, 0x2, 0x0, "15dc91768c78ba00960b7a5e4e7907526d7c7c8aee968a562b00cb905e1826a8f9ee0ac480576a7134801fc070041984c5c23fa0f93b59075853f70545ce9c61b15ff65cde5078b4209217f0220f0810f739bd470d405272edb16434a11869d08d8fef065de94710ee553b410c3c02a96c156836af8d11c4af4a77e766f9ed8ec43830fe02bb22babf9b41d4e5027b49ba3f720465bf4ee9b63892030f4fea97d94bc6cd1a7d4d6869cb3185e5da3ca0da"}, @op, @assoc, @assoc, @op, @op]}], 0x4924924924924b3, 0x0) r5 = socket(0xf, 0x4, 0x4) setsockopt$inet_udp_int(r5, 0x11, 0x66, &(0x7f00000001c0)=0x2, 0x4) r6 = accept4(r1, &(0x7f0000000200)=@l2={0x1f, 0x0, @none}, &(0x7f0000000180)=0x80, 0x180000) setsockopt$RXRPC_SECURITY_KEY(r6, 0x110, 0x1, &(0x7f0000000000)='(:\\\xd5^-}\x00', 0x8) ioctl$HCIINQUIRY(r6, 0x800448f0, &(0x7f0000000140)={0x3, 0x2, "d0f51f", 0xbc, 0x20}) [ 3166.156214][T24082] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3166.198123][T24012] netlink: 'syz-executor.3': attribute type 23 has an invalid length. [ 3166.223920][T24079] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 02:23:42 executing program 4: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="a2"], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0xf8, 0x48, 0xf0, 0xf8, 0x0, 0x208, 0x208, 0x208, 0x208, 0x208, 0x3, 0x0, {[{{@ipv6={@remote={0xfe, 0x80, [0x0, 0x0, 0x74]}, @dev, [], [], 'ip6gretap0\x00', 'vxcan1\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@ipv6={@mcast2, @loopback, [], [], 'ipvlan1\x00', 'caif0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=[@iv={0x0, 0x117, 0x2, 0x0, "15dc91768c78ba00960b7a5e4e7907526d7c7c8aee968a562b00cb905e1826a8f9ee0ac480576a7134801fc070041984c5c23fa0f93b59075853f70545ce9c61b15ff65cde5078b4209217f0220f0810f739bd470d405272edb16434a11869d08d8fef065de94710ee553b410c3c02a96c156836af8d11c4af4a77e766f9ed8ec43830fe02bb22babf9b41d4e5027b49ba3f720465bf4ee9b63892030f4fea97d94bc6cd1a7d4d6869cb3185e5da3ca0da"}, @op, @assoc, @assoc, @op, @op]}], 0x4924924924924b3, 0x0) r5 = socket(0xf, 0x4, 0x4) setsockopt$inet_udp_int(r5, 0x11, 0x66, &(0x7f00000001c0)=0x2, 0x4) r6 = accept4(r1, &(0x7f0000000200)=@l2={0x1f, 0x0, @none}, &(0x7f0000000180)=0x80, 0x180000) setsockopt$RXRPC_SECURITY_KEY(r6, 0x110, 0x1, &(0x7f0000000000)='(:\\\xd5^-}\x00', 0x8) ioctl$HCIINQUIRY(r6, 0x800448f0, &(0x7f0000000140)={0x3, 0x2, "d0f51f", 0xbc, 0x20}) 02:23:42 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r1, &(0x7f0000000140)={@val, @void, @eth={@link_local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4b549f", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}}, 0x4e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x34, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, r6, 0x1}, 0x14}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r6, 0x800, 0x70bd27, 0x25dfdbfe}, 0x14}}, 0x8045) socket(0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) [ 3166.247547][T24082] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3166.303726][T24083] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 02:23:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xf000}}}, 0x24}}, 0x0) 02:23:43 executing program 3: socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0x84f0) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x7) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, &(0x7f0000000000)) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, &(0x7f0000000040)=""/184, 0xffffffc9, 0x40012500, 0x0, 0xffffffffffffff49) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000000c0)={0x2c, r3, 0x703, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x14, 0x2, 0x0, 0x1, [{0x4}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x2c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000c00}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)={0x1e4, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xf4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x96}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdea}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x43ee}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0xdc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8000}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x100, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3f}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6cd3}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x50}, 0x40004) r7 = socket(0x0, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r8, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB, @ANYRES32=r8], 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x80, r3, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) [ 3166.454935][T24104] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3166.659879][T24069] netlink: 'syz-executor.2': attribute type 9 has an invalid length. 02:23:43 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a00032d0200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) 02:23:43 executing program 1: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r1, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) ppoll(&(0x7f0000000080)=[{r1, 0x80}], 0x1, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140), 0x8) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f000000ab80)={0x0, 0xfffffffffffffd57, 0x0, 0x1, 0x0, 0x0, 0x10000}, 0x40000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@local}}, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@loopback, 0x0, 0xff97, 0x0, 0x8, 0x0, 0x0, 0x20, 0x0, 0x0, r2}, {0x5, 0x0, 0x0, 0x4, 0x3, 0x5b}, {0x0, 0x0, 0x0, 0x26ffbb15}, 0x1000, 0x0, 0x6, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x4d3, 0xff}, 0x0, @in6=@empty, 0x0, 0x1, 0x3, 0x20, 0xfffff000, 0x7fff, 0xa264ce7}}, 0xe8) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r2}) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in=@loopback, @in6=@rand_addr=' \x01\x00', 0x4e22, 0x5, 0x4e21, 0x6, 0xa, 0x20, 0x80, 0x1d, 0x0, r2}, {0x5, 0x5bd, 0xc00000000000000, 0x7, 0x0, 0x9, 0xb0, 0xfffffffffffffffa}, {0xa875, 0x2, 0x0, 0x7}, 0x9, 0x6e6bb6, 0x2, 0x1, 0x2}, {{@in6=@remote, 0x4d3, 0xc3}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x20}, 0x0, 0x4, 0x0, 0x2, 0x7, 0x2, 0x3}}, 0xe8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@rand_addr=' \x01\x00', 0x4e21, 0x0, 0x4e23, 0x9, 0x2, 0x120, 0x20, 0x62, 0x0, r2}, {0x9a, 0x400, 0x9, 0x0, 0x7fffffff, 0xce, 0xffff}, {0x8, 0x180000000000, 0x401, 0xe2}, 0x5, 0x6e6bbd, 0x3, 0x1, 0x3}, {{@in6=@empty, 0x4d3, 0x2b}, 0xa, @in=@remote, 0x0, 0x0, 0x1, 0x32, 0xac, 0x3}}, 0xe8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@loopback, @in6=@local, 0x4e22, 0xa68, 0x4e20, 0x7, 0x2, 0xa0, 0x20, 0x3a, 0x0, r2}, {0x6df8, 0x3, 0x7f, 0x1, 0x9, 0x945b, 0x8, 0x20}, {0x4, 0x6, 0x0, 0x400}, 0x9, 0x6e6bb8, 0x0, 0x1, 0x2, 0x3}, {{@in=@broadcast, 0x4d3, 0x2b}, 0x2, @in6=@local, 0x0, 0x4, 0x3, 0x10, 0x1, 0x200, 0x2}}, 0xe8) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000080)={r3, @in={{0x2, 0x0, @multicast1}}}, &(0x7f0000000000)=0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0x200}, &(0x7f0000000100)=0x8) mmap(&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x2, 0x10, 0xffffffffffffffff, 0x68e9b000) 02:23:43 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x48, 0x2, 0x6, 0x5, 0x1000000, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x48}}, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000d40)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000dc0)=0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8}]}], {0x14}}, 0x7c}}, 0x0) connect$pppl2tp(r1, &(0x7f0000000e00)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x4, 0x0, 0x4, 0x4}}, 0x2e) 02:23:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) [ 3167.166149][T24149] netlink: 'syz-executor.2': attribute type 9 has an invalid length. 02:23:43 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000000)={'lo\x00', r2}) r3 = socket$inet6(0xa, 0x80002, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=[@iv={0x0, 0x117, 0x2, 0x0, "15dc91768c78ba00960b7a5e4e7907526d7c7c8aee968a562b00cb905e1826a8f9ee0ac480576a7134801fc070041984c5c23fa0f93b59075853f70545ce9c61b15ff65cde5078b4209217f0220f0810f739bd470d405272edb16434a11869d08d8fef065de94710ee553b410c3c02a96c156836af8d11c4af4a77e766f9ed8ec43830fe02bb22babf9b41d4e5027b49ba3f720465bf4ee9b63892030f4fea97d94bc6cd1a7d4d6869cb3185e5da3ca0da"}, @op, @assoc, @assoc, @op, @op]}], 0x4924924924924b3, 0x0) setsockopt$inet6_tcp_TLS_RX(r4, 0x6, 0x2, &(0x7f0000000040)=@gcm_256={{0x304}, "c26eed1ac6bbe124", "2fe5e841e8209e4a32822a5f6548849fd3b2ec148ad8c6ebdc0feefedacc1977", "c641ee15", "89899f6506be4048"}, 0x38) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000000)={'lo\x00'}) 02:23:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$int_in(r5, 0x5421, &(0x7f0000001100)=0x6) listen(r5, 0x0) accept4$rose(r5, 0x0, 0x0, 0x0) ioctl$SIOCRSSCAUSE(r5, 0x89e1, &(0x7f0000000040)=0x100) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x400c0}, 0x1b8d173af51f46cb) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140), 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r7, @ANYBLOB="0000001c0012000b00010062726964518d0d94a82a5536619767ccec50658eb3e6de601c6a0f208d06afabbb0b569431b520f70d79c665000000000000"], 0x3c}}, 0x0) ioctl$sock_bt_hci(r6, 0x0, &(0x7f00000003c0)="0923ea3de09e8523ab283dad57d971ddc9591acc6c49b1c70868f2a0b1fdb28a4383a05bcf85da6c3f65a02d6066c7ddba9373adf8d0b83af5e8ce9082def353e3c0d1d1e8f5b6d3b9c23c3ee0699bccfc3291fbf78524a4ec7f902cf97de7668f7288c3a1e6f7fcde9bddf6066903827daf428bf3573a35f7956d7272c0371ccc3cc790c3e402f54f691147b31b6dd107b64b712c94e603380c249c9a4912ec3f2ed34ea43d92bb1a656549a191698c258b78812069c2ce92a67032fb65f8bb1f16734b3537e124f2669c3fba535644d221c518f12a3bd92fecdcdc9889b31c4513a881474465de6542b9f901c839ac0dd3947d") sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="280000005000010400000014000e000000000000dfeb3ffd593b2f011ca5a86783cb087268b4ea96a963e86670e60b9a424ffd221931b08e989b7833982374e132bfc49a07b43f206034cc53dd171530787dbf0623336ac30d04d4974a09a6a9745c0a519328b9f0bec9b1760ec4c0d7f741c0e9d58628da1099654a1fc2ccef445d7198bbdef333f04295fd20320ff8fb48bf38a2602c9d5ea4ee9fa1da005e4dca85896fd3fbbb5519f9017c22cf45ae6efebdabcceeb94f3e72a81d7593b3f5fe68fa6558f61100bfb77bd5b736d8b9cabc73bb7f", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r7}}, 0x20}}, 0x0) [ 3167.416730][T24171] IPVS: ftp: loaded support on port[0] = 21 [ 3167.715115][T24171] lo speed is unknown, defaulting to 1000 [ 3167.742333][T24149] netlink: 'syz-executor.2': attribute type 9 has an invalid length. 02:23:44 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8}]}], {0x14}}, 0x7c}}, 0x0) ioctl$sock_ifreq(r0, 0x8994, &(0x7f00000000c0)={'bridge0\x00', @ifru_names='ip6gretap0\x00'}) r1 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a40000000000e8941aadfb05b2bf7852b6025b14ee0d0000000000000000800000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b00010074617072696f00007400020056000100020000000000000000000000000000000000080004000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000100002800c0001800800040001000080080005000b000000"], 0xa4}}, 0x0) 02:23:44 executing program 3: socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0x84f0) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x7) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, &(0x7f0000000000)) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, &(0x7f0000000040)=""/184, 0xffffffc9, 0x40012500, 0x0, 0xffffffffffffff49) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000000c0)={0x2c, r3, 0x703, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x14, 0x2, 0x0, 0x1, [{0x4}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x2c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000c00}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)={0x1e4, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xf4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x96}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdea}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x43ee}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0xdc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8000}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x100, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3f}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6cd3}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x50}, 0x40004) r7 = socket(0x0, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r8, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB, @ANYRES32=r8], 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x80, r3, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 02:23:44 executing program 1: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r1, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) ppoll(&(0x7f0000000080)=[{r1, 0x80}], 0x1, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140), 0x8) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f000000ab80)={0x0, 0xfffffffffffffd57, 0x0, 0x1, 0x0, 0x0, 0x10000}, 0x40000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@local}}, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@loopback, 0x0, 0xff97, 0x0, 0x8, 0x0, 0x0, 0x20, 0x0, 0x0, r2}, {0x5, 0x0, 0x0, 0x4, 0x3, 0x5b}, {0x0, 0x0, 0x0, 0x26ffbb15}, 0x1000, 0x0, 0x6, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x4d3, 0xff}, 0x0, @in6=@empty, 0x0, 0x1, 0x3, 0x20, 0xfffff000, 0x7fff, 0xa264ce7}}, 0xe8) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r2}) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in=@loopback, @in6=@rand_addr=' \x01\x00', 0x4e22, 0x5, 0x4e21, 0x6, 0xa, 0x20, 0x80, 0x1d, 0x0, r2}, {0x5, 0x5bd, 0xc00000000000000, 0x7, 0x0, 0x9, 0xb0, 0xfffffffffffffffa}, {0xa875, 0x2, 0x0, 0x7}, 0x9, 0x6e6bb6, 0x2, 0x1, 0x2}, {{@in6=@remote, 0x4d3, 0xc3}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x20}, 0x0, 0x4, 0x0, 0x2, 0x7, 0x2, 0x3}}, 0xe8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@rand_addr=' \x01\x00', 0x4e21, 0x0, 0x4e23, 0x9, 0x2, 0x120, 0x20, 0x62, 0x0, r2}, {0x9a, 0x400, 0x9, 0x0, 0x7fffffff, 0xce, 0xffff}, {0x8, 0x180000000000, 0x401, 0xe2}, 0x5, 0x6e6bbd, 0x3, 0x1, 0x3}, {{@in6=@empty, 0x4d3, 0x2b}, 0xa, @in=@remote, 0x0, 0x0, 0x1, 0x32, 0xac, 0x3}}, 0xe8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@loopback, @in6=@local, 0x4e22, 0xa68, 0x4e20, 0x7, 0x2, 0xa0, 0x20, 0x3a, 0x0, r2}, {0x6df8, 0x3, 0x7f, 0x1, 0x9, 0x945b, 0x8, 0x20}, {0x4, 0x6, 0x0, 0x400}, 0x9, 0x6e6bb8, 0x0, 0x1, 0x2, 0x3}, {{@in=@broadcast, 0x4d3, 0x2b}, 0x2, @in6=@local, 0x0, 0x4, 0x3, 0x10, 0x1, 0x200, 0x2}}, 0xe8) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000080)={r3, @in={{0x2, 0x0, @multicast1}}}, &(0x7f0000000000)=0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0x200}, &(0x7f0000000100)=0x8) mmap(&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x2, 0x10, 0xffffffffffffffff, 0x68e9b000) 02:23:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) [ 3168.316550][T24174] IPVS: ftp: loaded support on port[0] = 21 02:23:44 executing program 4: socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0x84f0) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x7) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, &(0x7f0000000000)) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, &(0x7f0000000040)=""/184, 0xffffffc9, 0x40012500, 0x0, 0xffffffffffffff49) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000000c0)={0x2c, r3, 0x703, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x14, 0x2, 0x0, 0x1, [{0x4}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x2c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000c00}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)={0x1e4, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xf4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x96}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdea}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x43ee}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0xdc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8000}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x100, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3f}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6cd3}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x50}, 0x40004) r7 = socket(0x0, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r8, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB, @ANYRES32=r8], 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x80, r3, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 02:23:44 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a00032e0200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) [ 3168.567164][T24229] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 3168.619444][T24174] lo speed is unknown, defaulting to 1000 [ 3168.619465][T24171] lo speed is unknown, defaulting to 1000 02:23:45 executing program 1: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r1, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) ppoll(&(0x7f0000000080)=[{r1, 0x80}], 0x1, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140), 0x8) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f000000ab80)={0x0, 0xfffffffffffffd57, 0x0, 0x1, 0x0, 0x0, 0x10000}, 0x40000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@local}}, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@loopback, 0x0, 0xff97, 0x0, 0x8, 0x0, 0x0, 0x20, 0x0, 0x0, r2}, {0x5, 0x0, 0x0, 0x4, 0x3, 0x5b}, {0x0, 0x0, 0x0, 0x26ffbb15}, 0x1000, 0x0, 0x6, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x4d3, 0xff}, 0x0, @in6=@empty, 0x0, 0x1, 0x3, 0x20, 0xfffff000, 0x7fff, 0xa264ce7}}, 0xe8) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r2}) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in=@loopback, @in6=@rand_addr=' \x01\x00', 0x4e22, 0x5, 0x4e21, 0x6, 0xa, 0x20, 0x80, 0x1d, 0x0, r2}, {0x5, 0x5bd, 0xc00000000000000, 0x7, 0x0, 0x9, 0xb0, 0xfffffffffffffffa}, {0xa875, 0x2, 0x0, 0x7}, 0x9, 0x6e6bb6, 0x2, 0x1, 0x2}, {{@in6=@remote, 0x4d3, 0xc3}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x20}, 0x0, 0x4, 0x0, 0x2, 0x7, 0x2, 0x3}}, 0xe8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@rand_addr=' \x01\x00', 0x4e21, 0x0, 0x4e23, 0x9, 0x2, 0x120, 0x20, 0x62, 0x0, r2}, {0x9a, 0x400, 0x9, 0x0, 0x7fffffff, 0xce, 0xffff}, {0x8, 0x180000000000, 0x401, 0xe2}, 0x5, 0x6e6bbd, 0x3, 0x1, 0x3}, {{@in6=@empty, 0x4d3, 0x2b}, 0xa, @in=@remote, 0x0, 0x0, 0x1, 0x32, 0xac, 0x3}}, 0xe8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@loopback, @in6=@local, 0x4e22, 0xa68, 0x4e20, 0x7, 0x2, 0xa0, 0x20, 0x3a, 0x0, r2}, {0x6df8, 0x3, 0x7f, 0x1, 0x9, 0x945b, 0x8, 0x20}, {0x4, 0x6, 0x0, 0x400}, 0x9, 0x6e6bb8, 0x0, 0x1, 0x2, 0x3}, {{@in=@broadcast, 0x4d3, 0x2b}, 0x2, @in6=@local, 0x0, 0x4, 0x3, 0x10, 0x1, 0x200, 0x2}}, 0xe8) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000080)={r3, @in={{0x2, 0x0, @multicast1}}}, &(0x7f0000000000)=0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0x200}, &(0x7f0000000100)=0x8) mmap(&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x2, 0x10, 0xffffffffffffffff, 0x68e9b000) 02:23:45 executing program 3: socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0x84f0) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x7) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, &(0x7f0000000000)) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, &(0x7f0000000040)=""/184, 0xffffffc9, 0x40012500, 0x0, 0xffffffffffffff49) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000000c0)={0x2c, r3, 0x703, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x14, 0x2, 0x0, 0x1, [{0x4}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x2c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000c00}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)={0x1e4, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xf4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x96}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdea}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x43ee}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0xdc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8000}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x100, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3f}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6cd3}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x50}, 0x40004) r7 = socket(0x0, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r8, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB, @ANYRES32=r8], 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x80, r3, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 02:23:46 executing program 4: socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0x84f0) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x7) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, &(0x7f0000000000)) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, &(0x7f0000000040)=""/184, 0xffffffc9, 0x40012500, 0x0, 0xffffffffffffff49) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000000c0)={0x2c, r3, 0x703, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x14, 0x2, 0x0, 0x1, [{0x4}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x2c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000c00}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)={0x1e4, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xf4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x96}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdea}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x43ee}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0xdc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8000}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x100, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3f}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6cd3}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x50}, 0x40004) r7 = socket(0x0, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r8, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB, @ANYRES32=r8], 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x80, r3, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) [ 3169.875088][T24174] lo speed is unknown, defaulting to 1000 02:23:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff3, 0xffff}}}, 0x24}}, 0x0) [ 3170.188646][T24311] __nla_validate_parse: 26 callbacks suppressed [ 3170.188657][T24311] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3170.403750][T24311] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 02:23:48 executing program 5: unshare(0x40000000) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7cc8f5e6e538ecf8829b08f7f4aae"}) ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f0000000000)={0x0, 0x3}) r1 = socket(0x10, 0x80002, 0xc) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000140)=0x5, &(0x7f0000000180)=0x2) accept$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, &(0x7f0000000100)=0x1c) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x7fffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x14, 0xb, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5459, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x58}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_val={0x18, 0xb}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @exit, @map_val={0x18, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8eb}]}, &(0x7f00000004c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x3, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000740)={0x1, 0xc, 0x1, 0x10001}, 0x10, 0x0, r2}, 0x78) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x14, 0x3, 0x1, 0x301}, 0x14}}, 0x0) r4 = socket(0x25, 0x805, 0x0) sendmsg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000000300)={@un=@file={0x1, './file0\x00'}, {&(0x7f0000000200)=""/221, 0xdd}, &(0x7f0000000100), 0x21}, 0xa0) 02:23:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x2}}}, 0x24}}, 0x0) 02:23:48 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc60040012000a00032f0200000037153e370a00098002000000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4d981000}, 0x0) 02:23:48 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r3}}, 0x20}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xe000000, &(0x7f0000000180)=[{&(0x7f0000000000)="2e000000120081aee4520cecff0e00fa078b5bdb4cb904e473730e55cff26d1b0e001d80040000005e510befccd7", 0x2e}], 0x1}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x10, &(0x7f0000000300)={r7}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={r7, 0xd0e}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x542a, 0x5, 0x201, 0x0, 0x3, 0x401, 0x3, 0x5, r7}, 0x20) 02:23:48 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='^'], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@deltaction={0x1e4, 0x31, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x14, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x59}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1ff}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'ipt\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x19}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x68}}]}, @TCA_ACT_TAB={0x30}, @TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x22, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf9d}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}]}, 0x1e4}}, 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="49000000240007050000004007a2a30005000086", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x6}, @ETHTOOL_A_COALESCE_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x8080) setsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f00000001c0), 0x4) 02:23:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2870b18af44207686c3cc23aeef59f000000fd000000000000000000074000000000", @ANYRES32=r3, @ANYBLOB="000008000a000200aaaaaaaaaabb0000"], 0x28}}, 0x0) [ 3172.605240][T24357] validate_nla: 1 callbacks suppressed [ 3172.605250][T24357] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 3172.608338][T24359] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3172.641797][T24360] IPVS: ftp: loaded support on port[0] = 21 [ 3172.719573][T24359] device bond15 entered promiscuous mode [ 3172.728158][T24358] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 02:23:49 executing program 4: r0 = socket(0x10, 0x80003, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r3 = socket$netlink(0x10, 0x3, 0x1) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8dcac94d14df964d}, 0x20008051) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e24, @private=0xa010100}}, 0x3}, &(0x7f0000000180)=0x90) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000002c0)={r4, 0xc0}, 0x8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xb8}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e21, @multicast2}}, 0x0, 0x0, 0x28, 0x0, "af282548aa56893f9c9b1a41af9fd0863acc2bf3aaff6af9101a7c5b5d6d0d5fea321f76009951ea7c89677f79d8a5c6593cd8f2f06c6fa877e609788d7f28781ba91e462ce6205fb33abadb368ddcec"}, 0xd8) sendfile(r7, r6, 0x0, 0x100000002) [ 3172.911232][T24364] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3172.995822][ T29] audit: type=1804 audit(1595471029.318:4890): pid=24413 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir251561709/syzkaller.UZqFTe/3921/cgroup.controllers" dev="sda1" ino=16075 res=1 [ 3173.037903][T24367] device veth264 entered promiscuous mode [ 3173.046996][T24367] bond15: (slave veth264): Enslaving as an active interface with an up link [ 3173.061723][T24386] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3173.085764][T24398] bond15 (unregistering): (slave veth264): Releasing backup interface [ 3173.141726][T24398] device veth264 left promiscuous mode [ 3173.234779][T24398] bond15 (unregistering): Released all slaves [ 3173.264476][T24405] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3173.289708][T24364] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3173.303196][T24360] lo speed is unknown, defaulting to 1000 [ 3173.312161][T24357] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 3173.330723][T24367] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:23:49 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000)=0xbf, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000180), &(0x7f0000000100)=0xffffffffffffff6c) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x8800) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xc8, r4, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0xac, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c564cd3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x29d4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2b4a3f0b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6c6b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbd8d}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x88fa}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x89f6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x48fb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4fbd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x65ae48bc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x59cf3635}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5112}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x45547c9a}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d6c317b}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1042b357}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x46ac}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x998d595}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x846}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6f757c9c}]}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x34040010}, 0x4000800) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x1ae) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) 02:23:49 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000300)={r2}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={r2, 0xd0e}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000440)={r2, @in6={{0xa, 0x4e23, 0x1, @empty, 0x3}}, [0x100, 0x0, 0x0, 0x6, 0x8d05, 0x2, 0x2, 0x81, 0x5, 0x9, 0x2, 0x9, 0x324, 0x7, 0x8]}, &(0x7f00000000c0)=0x100) write$binfmt_script(r0, &(0x7f00000006c0)=ANY=[], 0x208e24b) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x7c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000090ac9df00000000000000000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000f08000640000000000800074000000000140000001100010010000000000000000000000a"], 0x7c}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[], 0x3c}}, 0x20008450) sendfile(r4, r3, 0x0, 0x100000002) [ 3173.465290][T24374] IPVS: ftp: loaded support on port[0] = 21 [ 3173.550981][T24367] bond15 (unregistering): Released all slaves [ 3173.684883][ T29] audit: type=1804 audit(1595471030.008:4891): pid=24546 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir251561709/syzkaller.UZqFTe/3922/cgroup.controllers" dev="sda1" ino=16075 res=1 [ 3173.716017][T24398] ================================================================== [ 3173.724479][T24398] BUG: KASAN: use-after-free in __list_add_valid+0x93/0xa0 [ 3173.731681][T24398] Read of size 8 at addr ffff88802e8b4570 by task syz-executor.3/24398 [ 3173.739929][T24398] [ 3173.742266][T24398] CPU: 1 PID: 24398 Comm: syz-executor.3 Not tainted 5.8.0-rc4-syzkaller #0 [ 3173.750936][T24398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3173.760989][T24398] Call Trace: [ 3173.764287][T24398] dump_stack+0x18f/0x20d [ 3173.768632][T24398] ? __list_add_valid+0x93/0xa0 [ 3173.773485][T24398] ? __list_add_valid+0x93/0xa0 [ 3173.778343][T24398] print_address_description.constprop.0.cold+0xae/0x436 [ 3173.785373][T24398] ? lockdep_hardirqs_off+0x66/0xa0 [ 3173.790574][T24398] ? vprintk_func+0x97/0x1a6 [ 3173.795168][T24398] ? __list_add_valid+0x93/0xa0 [ 3173.800021][T24398] kasan_report.cold+0x1f/0x37 [ 3173.804791][T24398] ? __list_add_valid+0x93/0xa0 [ 3173.809646][T24398] __list_add_valid+0x93/0xa0 [ 3173.814334][T24398] linkwatch_fire_event+0xea/0x1d0 [ 3173.819458][T24398] netif_carrier_off+0x96/0xb0 [ 3173.824228][T24398] veth_newlink+0x488/0xa00 [ 3173.828739][T24398] ? veth_close+0x130/0x130 [ 3173.833323][T24398] ? alloc_netdev_mqs+0xa1d/0xdc0 [ 3173.838350][T24398] ? rtnl_create_link+0x184/0xad0 [ 3173.843356][T24398] ? veth_close+0x130/0x130 [ 3173.847838][T24398] __rtnl_newlink+0x1090/0x1750 [ 3173.852687][T24398] ? rtnl_setlink+0x3c0/0x3c0 [ 3173.857352][T24398] ? lock_downgrade+0x820/0x820 [ 3173.862216][T24398] ? is_bpf_text_address+0xcb/0x160 [ 3173.867414][T24398] ? kernel_text_address+0xbd/0xf0 [ 3173.872515][T24398] ? __kernel_text_address+0x9/0x30 [ 3173.877693][T24398] ? unwind_get_return_address+0x51/0x90 [ 3173.883356][T24398] ? profile_setup.cold+0xc1/0xc1 [ 3173.888366][T24398] ? arch_stack_walk+0x97/0xf0 [ 3173.893149][T24398] ? stack_trace_save+0x8c/0xc0 [ 3173.898029][T24398] ? stack_trace_consume_entry+0x160/0x160 [ 3173.903841][T24398] ? mark_lock+0xbc/0x1710 [ 3173.908239][T24398] ? lock_is_held_type+0xb0/0xe0 [ 3173.913168][T24398] ? trace_kmalloc+0xfd/0x130 [ 3173.917874][T24398] ? kmem_cache_alloc_trace+0x168/0x2d0 [ 3173.923422][T24398] rtnl_newlink+0x64/0xa0 [ 3173.927765][T24398] ? __rtnl_newlink+0x1750/0x1750 [ 3173.932766][T24398] rtnetlink_rcv_msg+0x44e/0xad0 [ 3173.937688][T24398] ? rtnetlink_put_metrics+0x510/0x510 [ 3173.943172][T24398] ? lock_acquire+0x1f1/0xad0 [ 3173.947935][T24398] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 3173.953202][T24398] netlink_rcv_skb+0x15a/0x430 [ 3173.957963][T24398] ? rtnetlink_put_metrics+0x510/0x510 [ 3173.963412][T24398] ? netlink_ack+0xa10/0xa10 [ 3173.967997][T24398] netlink_unicast+0x533/0x7d0 [ 3173.972754][T24398] ? netlink_attachskb+0x810/0x810 [ 3173.977865][T24398] ? _copy_from_iter_full+0x247/0x890 [ 3173.983244][T24398] ? __phys_addr+0x9a/0x110 [ 3173.987733][T24398] ? __phys_addr_symbol+0x2c/0x70 [ 3173.992741][T24398] ? __check_object_size+0x171/0x3e4 [ 3173.998032][T24398] netlink_sendmsg+0x856/0xd90 [ 3174.002806][T24398] ? netlink_unicast+0x7d0/0x7d0 [ 3174.007729][T24398] ? netlink_unicast+0x7d0/0x7d0 [ 3174.012658][T24398] sock_sendmsg+0xcf/0x120 [ 3174.017077][T24398] ____sys_sendmsg+0x6e8/0x810 [ 3174.021848][T24398] ? kernel_sendmsg+0x50/0x50 [ 3174.026502][T24398] ? do_recvmmsg+0x6d0/0x6d0 [ 3174.031089][T24398] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3174.037072][T24398] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3174.043041][T24398] ___sys_sendmsg+0xf3/0x170 [ 3174.047624][T24398] ? sendmsg_copy_msghdr+0x160/0x160 [ 3174.052899][T24398] ? __fget_files+0x272/0x400 [ 3174.057584][T24398] ? lock_downgrade+0x820/0x820 [ 3174.062432][T24398] ? find_held_lock+0x2d/0x110 [ 3174.067184][T24398] ? __might_fault+0x11f/0x1d0 [ 3174.071928][T24398] ? __fget_files+0x294/0x400 [ 3174.076598][T24398] ? __fget_light+0xea/0x280 [ 3174.081197][T24398] __sys_sendmsg+0xe5/0x1b0 [ 3174.085701][T24398] ? __sys_sendmsg_sock+0xb0/0xb0 [ 3174.090716][T24398] ? __x64_sys_futex+0x382/0x4e0 [ 3174.095637][T24398] ? do_syscall_64+0x1c/0xe0 [ 3174.100215][T24398] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3174.106207][T24398] do_syscall_64+0x60/0xe0 [ 3174.110633][T24398] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3174.116532][T24398] RIP: 0033:0x45c1f9 [ 3174.120397][T24398] Code: Bad RIP value. [ 3174.124443][T24398] RSP: 002b:00007f7a2d785c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3174.132850][T24398] RAX: ffffffffffffffda RBX: 000000000002b580 RCX: 000000000045c1f9 [ 3174.140818][T24398] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 3174.148787][T24398] RBP: 000000000078c080 R08: 0000000000000000 R09: 0000000000000000 [ 3174.156762][T24398] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078c04c [ 3174.164726][T24398] R13: 00007ffc444de78f R14: 00007f7a2d7869c0 R15: 000000000078c04c [ 3174.172696][T24398] [ 3174.175003][T24398] Allocated by task 24367: [ 3174.179400][T24398] save_stack+0x1b/0x40 [ 3174.183551][T24398] __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 3174.189191][T24398] kvmalloc_node+0xb4/0xf0 [ 3174.193598][T24398] alloc_netdev_mqs+0x97/0xdc0 [ 3174.198349][T24398] rtnl_create_link+0x219/0xad0 [ 3174.203186][T24398] __rtnl_newlink+0xfa0/0x1750 [ 3174.207927][T24398] rtnl_newlink+0x64/0xa0 [ 3174.212241][T24398] rtnetlink_rcv_msg+0x44e/0xad0 [ 3174.217166][T24398] netlink_rcv_skb+0x15a/0x430 [ 3174.221921][T24398] netlink_unicast+0x533/0x7d0 [ 3174.226686][T24398] netlink_sendmsg+0x856/0xd90 [ 3174.231439][T24398] sock_sendmsg+0xcf/0x120 [ 3174.235855][T24398] ____sys_sendmsg+0x6e8/0x810 [ 3174.240595][T24398] ___sys_sendmsg+0xf3/0x170 [ 3174.245160][T24398] __sys_sendmsg+0xe5/0x1b0 [ 3174.249640][T24398] do_syscall_64+0x60/0xe0 [ 3174.254033][T24398] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3174.259902][T24398] [ 3174.262218][T24398] Freed by task 24367: [ 3174.266284][T24398] save_stack+0x1b/0x40 [ 3174.270426][T24398] __kasan_slab_free+0xf5/0x140 [ 3174.275254][T24398] kfree+0x103/0x2c0 [ 3174.279136][T24398] kvfree+0x42/0x50 [ 3174.282932][T24398] device_release+0x71/0x200 [ 3174.287519][T24398] kobject_put+0x1c0/0x270 [ 3174.291924][T24398] put_device+0x1b/0x30 [ 3174.296058][T24398] free_netdev+0x35d/0x480 [ 3174.300450][T24398] __rtnl_newlink+0x14d8/0x1750 [ 3174.305275][T24398] rtnl_newlink+0x64/0xa0 [ 3174.309587][T24398] rtnetlink_rcv_msg+0x44e/0xad0 [ 3174.314525][T24398] netlink_rcv_skb+0x15a/0x430 [ 3174.319264][T24398] netlink_unicast+0x533/0x7d0 [ 3174.324015][T24398] netlink_sendmsg+0x856/0xd90 [ 3174.328794][T24398] sock_sendmsg+0xcf/0x120 [ 3174.333209][T24398] ____sys_sendmsg+0x6e8/0x810 [ 3174.337954][T24398] ___sys_sendmsg+0xf3/0x170 [ 3174.342542][T24398] __sys_sendmsg+0xe5/0x1b0 [ 3174.347061][T24398] do_syscall_64+0x60/0xe0 [ 3174.351492][T24398] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3174.357381][T24398] [ 3174.359703][T24398] The buggy address belongs to the object at ffff88802e8b4000 [ 3174.359703][T24398] which belongs to the cache kmalloc-8k of size 8192 [ 3174.373761][T24398] The buggy address is located 1392 bytes inside of [ 3174.373761][T24398] 8192-byte region [ffff88802e8b4000, ffff88802e8b6000) [ 3174.387200][T24398] The buggy address belongs to the page: [ 3174.392821][T24398] page:ffffea0000ba2d00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 head:ffffea0000ba2d00 order:2 compound_mapcount:0 compound_pincount:0 [ 3174.407996][T24398] flags: 0xfffe0000010200(slab|head) [ 3174.413276][T24398] raw: 00fffe0000010200 ffffea0000a2fb08 ffffea0000c1c108 ffff8880aa0021c0 [ 3174.421841][T24398] raw: 0000000000000000 ffff88802e8b4000 0000000100000001 0000000000000000 [ 3174.430427][T24398] page dumped because: kasan: bad access detected [ 3174.436854][T24398] [ 3174.439177][T24398] Memory state around the buggy address: [ 3174.444801][T24398] ffff88802e8b4400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3174.452869][T24398] ffff88802e8b4480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3174.460951][T24398] >ffff88802e8b4500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3174.468994][T24398] ^ [ 3174.476695][T24398] ffff88802e8b4580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3174.484746][T24398] ffff88802e8b4600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3174.492802][T24398] ================================================================== [ 3174.500865][T24398] Disabling lock debugging due to kernel taint [ 3174.507021][T24398] Kernel panic - not syncing: panic_on_warn set ... [ 3174.513583][T24398] CPU: 1 PID: 24398 Comm: syz-executor.3 Tainted: G B 5.8.0-rc4-syzkaller #0 [ 3174.523611][T24398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3174.533677][T24398] Call Trace: [ 3174.536945][T24398] dump_stack+0x18f/0x20d [ 3174.541251][T24398] ? __list_add_valid+0x40/0xa0 [ 3174.546083][T24398] panic+0x2e3/0x75c [ 3174.550051][T24398] ? __warn_printk+0xf3/0xf3 [ 3174.554620][T24398] ? _raw_spin_unlock_irqrestore+0x5b/0xe0 [ 3174.560416][T24398] ? __list_add_valid+0x93/0xa0 [ 3174.565249][T24398] ? __list_add_valid+0x93/0xa0 [ 3174.570090][T24398] end_report+0x4d/0x53 [ 3174.574230][T24398] kasan_report.cold+0xd/0x37 [ 3174.578894][T24398] ? __list_add_valid+0x93/0xa0 [ 3174.583718][T24398] __list_add_valid+0x93/0xa0 [ 3174.588370][T24398] linkwatch_fire_event+0xea/0x1d0 [ 3174.593464][T24398] netif_carrier_off+0x96/0xb0 [ 3174.598203][T24398] veth_newlink+0x488/0xa00 [ 3174.602695][T24398] ? veth_close+0x130/0x130 [ 3174.607197][T24398] ? alloc_netdev_mqs+0xa1d/0xdc0 [ 3174.612197][T24398] ? rtnl_create_link+0x184/0xad0 [ 3174.617194][T24398] ? veth_close+0x130/0x130 [ 3174.621671][T24398] __rtnl_newlink+0x1090/0x1750 [ 3174.626499][T24398] ? rtnl_setlink+0x3c0/0x3c0 [ 3174.631160][T24398] ? lock_downgrade+0x820/0x820 [ 3174.635991][T24398] ? is_bpf_text_address+0xcb/0x160 [ 3174.641163][T24398] ? kernel_text_address+0xbd/0xf0 [ 3174.646268][T24398] ? __kernel_text_address+0x9/0x30 [ 3174.651452][T24398] ? unwind_get_return_address+0x51/0x90 [ 3174.657073][T24398] ? profile_setup.cold+0xc1/0xc1 [ 3174.662073][T24398] ? arch_stack_walk+0x97/0xf0 [ 3174.666831][T24398] ? stack_trace_save+0x8c/0xc0 [ 3174.671656][T24398] ? stack_trace_consume_entry+0x160/0x160 [ 3174.677461][T24398] ? mark_lock+0xbc/0x1710 [ 3174.681962][T24398] ? lock_is_held_type+0xb0/0xe0 [ 3174.686901][T24398] ? trace_kmalloc+0xfd/0x130 [ 3174.691552][T24398] ? kmem_cache_alloc_trace+0x168/0x2d0 [ 3174.697076][T24398] rtnl_newlink+0x64/0xa0 [ 3174.701393][T24398] ? __rtnl_newlink+0x1750/0x1750 [ 3174.706399][T24398] rtnetlink_rcv_msg+0x44e/0xad0 [ 3174.711335][T24398] ? rtnetlink_put_metrics+0x510/0x510 [ 3174.716769][T24398] ? lock_acquire+0x1f1/0xad0 [ 3174.721426][T24398] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 3174.726699][T24398] netlink_rcv_skb+0x15a/0x430 [ 3174.731460][T24398] ? rtnetlink_put_metrics+0x510/0x510 [ 3174.736904][T24398] ? netlink_ack+0xa10/0xa10 [ 3174.741470][T24398] netlink_unicast+0x533/0x7d0 [ 3174.746208][T24398] ? netlink_attachskb+0x810/0x810 [ 3174.751293][T24398] ? _copy_from_iter_full+0x247/0x890 [ 3174.756638][T24398] ? __phys_addr+0x9a/0x110 [ 3174.761124][T24398] ? __phys_addr_symbol+0x2c/0x70 [ 3174.766127][T24398] ? __check_object_size+0x171/0x3e4 [ 3174.771402][T24398] netlink_sendmsg+0x856/0xd90 [ 3174.776140][T24398] ? netlink_unicast+0x7d0/0x7d0 [ 3174.781066][T24398] ? netlink_unicast+0x7d0/0x7d0 [ 3174.785992][T24398] sock_sendmsg+0xcf/0x120 [ 3174.790384][T24398] ____sys_sendmsg+0x6e8/0x810 [ 3174.795138][T24398] ? kernel_sendmsg+0x50/0x50 [ 3174.799796][T24398] ? do_recvmmsg+0x6d0/0x6d0 [ 3174.804364][T24398] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3174.810318][T24398] ? lockdep_hardirqs_on_prepare+0x590/0x590 [ 3174.816282][T24398] ___sys_sendmsg+0xf3/0x170 [ 3174.820847][T24398] ? sendmsg_copy_msghdr+0x160/0x160 [ 3174.826130][T24398] ? __fget_files+0x272/0x400 [ 3174.830795][T24398] ? lock_downgrade+0x820/0x820 [ 3174.835619][T24398] ? find_held_lock+0x2d/0x110 [ 3174.840356][T24398] ? __might_fault+0x11f/0x1d0 [ 3174.845109][T24398] ? __fget_files+0x294/0x400 [ 3174.849765][T24398] ? __fget_light+0xea/0x280 [ 3174.854356][T24398] __sys_sendmsg+0xe5/0x1b0 [ 3174.858832][T24398] ? __sys_sendmsg_sock+0xb0/0xb0 [ 3174.863839][T24398] ? __x64_sys_futex+0x382/0x4e0 [ 3174.868766][T24398] ? do_syscall_64+0x1c/0xe0 [ 3174.873346][T24398] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 3174.879299][T24398] do_syscall_64+0x60/0xe0 [ 3174.883691][T24398] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3174.889566][T24398] RIP: 0033:0x45c1f9 [ 3174.893453][T24398] Code: Bad RIP value. [ 3174.897490][T24398] RSP: 002b:00007f7a2d785c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3174.905871][T24398] RAX: ffffffffffffffda RBX: 000000000002b580 RCX: 000000000045c1f9 [ 3174.913816][T24398] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 3174.921772][T24398] RBP: 000000000078c080 R08: 0000000000000000 R09: 0000000000000000 [ 3174.929747][T24398] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078c04c [ 3174.937700][T24398] R13: 00007ffc444de78f R14: 00007f7a2d7869c0 R15: 000000000078c04c [ 3174.946837][T24398] Kernel Offset: disabled [ 3174.951150][T24398] Rebooting in 86400 seconds..