f2253bd404d94eeacdd4e552", 0x0, 0x0, {0x7, 0x7}, {0x0, 0x4}, 0x2, [0x800, 0xb, 0xfa, 0x5, 0x1, 0xf8, 0x5, 0x10000, 0x7492, 0x7, 0x3, 0x1ff, 0x5074, 0x9, 0x80, 0x4]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000700)={"6260db81db3fb20e956bb3029fb4aaee", 0x0, 0x0, {0x1, 0x7}, {0x100, 0x2}, 0xfe, [0x80, 0x2, 0x8, 0x2c, 0x4e, 0x8001, 0xffffffff, 0xffffffff, 0x3, 0x6, 0x1, 0x5, 0x7, 0x0, 0x1, 0x3f]}) r7 = socket(0x29, 0x2, 0x0) ioctl$SIOCRSGCAUSE(r7, 0x89e2, 0xfffffffffffffffe) fstatfs(r7, &(0x7f0000000280)=""/25) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 01:39:33 executing program 1: getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x0, 0x2}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, &(0x7f0000000100)) 01:39:33 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000500)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000280)=0x10) 01:39:33 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x38, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3c07b4d120b3994d67b"}], 0x38}, 0x40) 01:39:33 executing program 0: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000540)={0xa, 0x0, 0x0, @empty}, 0x1c) io_setup(0xa6, &(0x7f0000000040)=0x0) io_submit(r2, 0x0, &(0x7f0000000240)) 01:39:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 01:39:33 executing program 1: getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x0, 0x2}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, 0x0) 01:39:33 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000500)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000280)=0x10) [ 988.075241][T26258] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 988.076564][T26258] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 01:39:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 01:39:33 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000500)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000280)=0x10) 01:39:33 executing program 1: getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x0, 0x2}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, 0x0) 01:39:33 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x379}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000240)={r4}, 0xc) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = socket(0x29, 0x2, 0x0) ioctl$SIOCRSGCAUSE(r6, 0x89e2, 0xfffffffffffffffe) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r6, 0x80, &(0x7f00000002c0)=@vsock, 0x0, 0x0, 0x0, {0x0, r5}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000180)={{}, 0x0, 0x10, @unused=[0x4f, 0x81, 0x0, 0xfffffffffffffffa], @subvolid=0x2}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, &(0x7f0000000080)={0x0, 0x9, 0x1000}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000023c0)={{}, 0x0, 0x16, @unused=[0x9, 0x2, 0x8000, 0x6d3c], @subvolid=0x81}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000340)={"6edc68d3f2253bd404d94eeacdd4e552", 0x0, 0x0, {0x7, 0x7}, {0x0, 0x4}, 0x2, [0x800, 0xb, 0xfa, 0x5, 0x1, 0xf8, 0x5, 0x10000, 0x7492, 0x7, 0x3, 0x1ff, 0x5074, 0x9, 0x80, 0x4]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000700)={"6260db81db3fb20e956bb3029fb4aaee", 0x0, 0x0, {0x1, 0x7}, {0x100, 0x2}, 0xfe, [0x80, 0x2, 0x8, 0x2c, 0x4e, 0x8001, 0xffffffff, 0xffffffff, 0x3, 0x6, 0x1, 0x5, 0x7, 0x0, 0x1, 0x3f]}) r7 = socket(0x29, 0x2, 0x0) ioctl$SIOCRSGCAUSE(r7, 0x89e2, 0xfffffffffffffffe) fstatfs(r7, &(0x7f0000000280)=""/25) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}]}, 0x20}}, 0x0) 01:39:33 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000280)) 01:39:33 executing program 1: getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x0, 0x2}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, 0x0) 01:39:34 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x38, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3c07b4d120b3994d67b"}, {0xd8, 0x0, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f787a19296ba3800b84907da3b950fad1c3baf45a4cfb3a1c"}], 0x110}, 0x40) 01:39:34 executing program 0: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000540)={0xa, 0x0, 0x0, @empty}, 0x1c) io_setup(0xa6, &(0x7f0000000040)=0x0) io_submit(r2, 0x0, &(0x7f0000000240)) 01:39:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}]}, 0x20}}, 0x0) 01:39:34 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000280)) 01:39:34 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], 0x0, 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x38, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3c07b4d120b3994d67b"}, {0xd8, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f787a19296ba3800b84907da3b950fad1c3baf45a4cfb3a1c"}], 0x110}, 0x40) 01:39:34 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x379}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000240)={r4}, 0xc) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = socket(0x29, 0x2, 0x0) ioctl$SIOCRSGCAUSE(r6, 0x89e2, 0xfffffffffffffffe) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r6, 0x80, &(0x7f00000002c0)=@vsock, 0x0, 0x0, 0x0, {0x0, r5}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000180)={{}, 0x0, 0x10, @unused=[0x4f, 0x81, 0x0, 0xfffffffffffffffa], @subvolid=0x2}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, &(0x7f0000000080)={0x0, 0x9, 0x1000}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000023c0)={{}, 0x0, 0x16, @unused=[0x9, 0x2, 0x8000, 0x6d3c], @subvolid=0x81}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000340)={"6edc68d3f2253bd404d94eeacdd4e552", 0x0, 0x0, {0x7, 0x7}, {0x0, 0x4}, 0x2, [0x800, 0xb, 0xfa, 0x5, 0x1, 0xf8, 0x5, 0x10000, 0x7492, 0x7, 0x3, 0x1ff, 0x5074, 0x9, 0x80, 0x4]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000700)={"6260db81db3fb20e956bb3029fb4aaee", 0x0, 0x0, {0x1, 0x7}, {0x100, 0x2}, 0xfe, [0x80, 0x2, 0x8, 0x2c, 0x4e, 0x8001, 0xffffffff, 0xffffffff, 0x3, 0x6, 0x1, 0x5, 0x7, 0x0, 0x1, 0x3f]}) r7 = socket(0x29, 0x2, 0x0) ioctl$SIOCRSGCAUSE(r7, 0x89e2, 0xfffffffffffffffe) fstatfs(r7, &(0x7f0000000280)=""/25) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:34 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000280)) 01:39:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}]}, 0x20}}, 0x0) 01:39:34 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x10) [ 988.969296][T26291] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 988.988493][T26291] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 01:39:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x0, 0x1}]}]}]}]}, 0x2c}}, 0x0) [ 989.042666][T26296] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 989.044492][T26296] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 01:39:34 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x10) 01:39:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x0, 0x1}]}]}]}]}, 0x2c}}, 0x0) 01:39:34 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x38, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3c07b4d120b3994d67b"}, {0xd8, 0x0, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f787a19296ba3800b84907da3b950fad1c3baf45a4cfb3a1c"}], 0x110}, 0x40) [ 989.803642][T26310] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 989.805255][T26310] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 01:39:35 executing program 0: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000540)={0xa, 0x0, 0x0, @empty}, 0x1c) io_setup(0xa6, &(0x7f0000000040)=0x0) io_submit(r2, 0x1, &(0x7f0000000240)=[0x0]) 01:39:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x0, 0x1}]}]}]}]}, 0x2c}}, 0x0) 01:39:35 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x10) 01:39:35 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = syz_io_uring_setup(0x570, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) io_uring_enter(r0, 0x202f, 0xbbba, 0x2, &(0x7f0000000180)={[0x100000001]}, 0x8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r1, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:35 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x81, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x6, {[@global, @main=@item_4={0x3, 0x0, 0x0, "ce743651"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4}}, &(0x7f0000000140)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0x0, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc}}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="000312"], 0x0, 0x0, 0x0}, 0x0) 01:39:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 01:39:35 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)}, &(0x7f0000000280)=0x10) 01:39:35 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)}, &(0x7f0000000280)=0x10) 01:39:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 01:39:35 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)}, &(0x7f0000000280)=0x10) 01:39:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) [ 990.187257][ T6] usb 2-1: new high-speed USB device number 15 using dummy_hcd 01:39:35 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x38, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3c07b4d120b3994d67b"}, {0xd8, 0x0, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f787a19296ba3800b84907da3b950fad1c3baf45a4cfb3a1c"}], 0x110}, 0x40) [ 990.613682][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 990.613715][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 990.613749][ T6] usb 2-1: New USB device found, idVendor=5543, idProduct=0081, bcdDevice= 0.00 [ 990.613771][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.615805][ T6] usb 2-1: config 0 descriptor?? [ 990.671363][T26337] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 990.672948][T26337] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 01:39:36 executing program 0: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000540)={0xa, 0x0, 0x0, @empty}, 0x1c) io_setup(0xa6, &(0x7f0000000040)=0x0) io_submit(r2, 0x1, &(0x7f0000000240)=[0x0]) 01:39:36 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000500)=[@in6={0xa, 0x0, 0x0, @private0}]}, 0x0) 01:39:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x2c}}, 0x0) 01:39:36 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getpeername$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000240)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1d, 0x6, 0x9, 0x7, 0x82, r0, 0x2, '\x00', r1, r0, 0x2, 0x4, 0x5}, 0x48) r2 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r5, &(0x7f0000000000), 0x10) r6 = accept4$unix(r0, &(0x7f00000003c0)=@abs, &(0x7f0000000280)=0x6e, 0x80800) getsockopt$IP_SET_OP_GET_FNAME(r6, 0x1, 0x53, &(0x7f0000000440)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000480)=0x2c) io_uring_enter(r2, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 991.387354][ T6] usbhid 2-1:0.0: can't add hid device: -32 [ 991.387447][ T6] usbhid: probe of 2-1:0.0 failed with error -32 [ 992.738289][ T1220] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.738335][ T1220] ieee802154 phy1 wpan1: encryption failed: -22 01:39:38 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff040000001843000006000000000000000000000018000000000000000000000001000000181600", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x38, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3c07b4d120b3994d67b"}, {0xd8, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f787a19296ba3800b84907da3b950fad1c3baf45a4cfb3a1c"}], 0x110}, 0x40) 01:39:38 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000500)=[@in6={0xa, 0x0, 0x0, @private0}]}, 0x0) 01:39:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x2c}}, 0x0) 01:39:38 executing program 5: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000540)={0xa, 0x0, 0x0, @empty}, 0x1c) io_setup(0xa6, &(0x7f0000000040)=0x0) io_submit(r2, 0x1, &(0x7f0000000240)=[0x0]) 01:39:38 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x38, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3c07b4d120b3994d67b"}, {0xd8, 0x118, 0x0, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f787a19296ba3800b84907da3b950fad1c3baf45a4cfb3a1c"}], 0x110}, 0x40) 01:39:38 executing program 0: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000540)={0xa, 0x0, 0x0, @empty}, 0x1c) io_setup(0xa6, &(0x7f0000000040)=0x0) io_submit(r2, 0x1, &(0x7f0000000240)=[0x0]) [ 992.909334][T19181] usb 2-1: USB disconnect, device number 15 01:39:38 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000500)=[@in6={0xa, 0x0, 0x0, @private0}]}, 0x0) 01:39:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x2c}}, 0x0) 01:39:38 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff040000001843000006000000000000000000000018000000000000000000000001000000181600", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x38, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3c07b4d120b3994d67b"}, {0xd8, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f787a19296ba3800b84907da3b950fad1c3baf45a4cfb3a1c"}], 0x110}, 0x40) [ 993.012417][T26361] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 993.013757][T26361] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 993.061240][T26364] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 01:39:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x10, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{}]}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x30}}, 0x0) 01:39:38 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff040000001843000006000000000000000000000018000000000000000000000001000000181600", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x38, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3c07b4d120b3994d67b"}, {0xd8, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f787a19296ba3800b84907da3b950fad1c3baf45a4cfb3a1c"}], 0x110}, 0x40) [ 993.062845][T26364] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 01:39:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x10, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{}]}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x30}}, 0x0) [ 993.185647][T26372] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 993.188259][T26372] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 993.280701][T26377] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 993.283186][T26377] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:39:39 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff040000001843000006000000000000000000000018000000000000000000000001000000181600", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x38, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3c07b4d120b3994d67b"}, {0xd8, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f787a19296ba3800b84907da3b950fad1c3baf45a4cfb3a1c"}], 0x110}, 0x40) 01:39:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x10, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{}]}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x30}}, 0x0) 01:39:39 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x38, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3c07b4d120b3994d67b"}, {0xd8, 0x118, 0x0, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f787a19296ba3800b84907da3b950fad1c3baf45a4cfb3a1c"}], 0x110}, 0x40) 01:39:39 executing program 0: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000540)={0xa, 0x0, 0x0, @empty}, 0x1c) io_setup(0xa6, &(0x7f0000000040)=0x0) io_submit(r2, 0x1, &(0x7f0000000240)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x58}]) 01:39:39 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff040000001843000006000000000000000000000018000000000000000000000001000000181600", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x38, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3c07b4d120b3994d67b"}, {0xd8, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f787a19296ba3800b84907da3b950fad1c3baf45a4cfb3a1c"}], 0x110}, 0x40) 01:39:39 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x38, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3c07b4d120b3994d67b"}, {0xd8, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f787a19296ba3800b84907da3b950fad1c3baf45a4cfb3a1c"}], 0x110}, 0x40) [ 993.986402][T26386] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 993.989227][T26386] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 01:39:39 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x38, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3c07b4d120b3994d67b"}, {0xd8, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f787a19296ba3800b84907da3b950fad1c3baf45a4cfb3a1c"}], 0x110}, 0x40) [ 994.025667][T26387] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 994.038522][T26387] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 994.152128][T26395] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 994.153864][T26395] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 994.161726][T26396] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 994.163857][T26396] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 994.169559][T26397] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 994.172938][T26397] netlink: 'syz-executor.3': attribute type 4 has an invalid length. 01:39:39 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x38, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3c07b4d120b3994d67b"}, {0xd8, 0x118, 0x0, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f787a19296ba3800b84907da3b950fad1c3baf45a4cfb3a1c"}], 0x110}, 0x40) 01:39:40 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x38, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3c07b4d120b3994d67b"}, {0xd8, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f787a19296ba3800b84907da3b950fad1c3baf45a4cfb3a1c"}], 0x110}, 0x40) 01:39:40 executing program 0: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000540)={0xa, 0x0, 0x0, @empty}, 0x1c) io_setup(0xa6, &(0x7f0000000040)=0x0) io_submit(r2, 0x1, &(0x7f0000000240)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x58}]) [ 994.846818][T26402] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 994.848525][T26402] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 01:39:40 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x38, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3c07b4d120b3994d67b"}, {0xd8, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f787a19296ba3800b84907da3b950fad1c3baf45a4cfb3a1c"}], 0x110}, 0x40) 01:39:40 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_setup(0x42a7, &(0x7f0000000240)={0x0, 0x723b, 0x5, 0x0, 0x3a5, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000340)=0x0) r5 = syz_mount_image$qnx6(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x100, 0x7, &(0x7f0000000900)=[{&(0x7f0000000400)="f7719ae68e9d293521ccd7a014e73a7545cbdf350fa89ab934a7e517263f6b1564eb96cf2621d09dd126b42d9056f77060e7b240afd05c38d364dfd9d9649c89f78a00e5337592cb44546a570a683022f72c02bd3cc3e694a7e9ef8be3764ec1e5e1e3d692051a7b0d81fc8d08f16266871e3df0ef2b17299efa8ba4e4bf5a4d86eb65d22fb3574bd1947f9189", 0x8d}, {&(0x7f00000004c0)="0d1c7096b90becab5e11ce976eedcca248f7e88f73e0b0d379ab09b66dac42dc90f45ec3542bb1c46a223253a3185dc5650f122b52de40c5e013746a8ff8e4c7c7a48a62026e0072ca19fb8252b916378c238151b5a61456e8726d9f09c6b218ea7f517014d8644aaacef351e9e64ac7eea68f5acaed7e879931abcc0428b55751bd0694514c639099b8365f7337a38cf1", 0x91, 0x1ff}, {&(0x7f0000000580)="9ec3adc8a1afbc537cda1b63f64c5eb1b157d6f7db1c9da7b7f5e1687f1e865ce6b60933ac04637b58f9dcb206c2c0087f5f845ad3b86fcf286cc8e61f8bb8701d66b478f939dc16a7bf161492f44ce91cc53b3d55ee46c211e7ab7c68c64fe24a6abbd3845e197f7d5d5d555b7d2d6b208fecaa3330512f51637fcca39c278ae3335a8f6c1be8aebfb8dade76445e901e3de83dfb6423ada7c4f12e830547a56cf1557c1d598bcb7f3c55086a643af8a8b405e1751158981cb48bf38ed69a763d36e6c5de8badb515cb3148f53641d7b25a4f0ebbf16fad055e0173672bb2dc26f7076f4d599c7498141dbb72ee763cfd9a5b", 0xf3, 0x8a51}, {&(0x7f0000000680)="2bfc92a29eda247b843cca9a0fb9ba85060613de33e05bc4eba0ff13f5854802d3e2e9d8da12d0adb3519e56d24fcb6ff3f813929e4300a447eaf118822ffe7fdd63d5f0b9d5c926b2ee7f77c326fc8e04a3dfaf897c19648f080237775ce73a4721dd3f13359b25082ef5936d207fe1489f2846e7f3b25e85434df50f28a2aac5", 0x81, 0xffff}, {&(0x7f0000000740)="ee8df338f727b693280a0131f540704ff17bb4d934e76073d2678280a4705b385413d8bfee90290eaa2c65c63edb68822cba7fd68827", 0x36, 0x6}, {&(0x7f0000000780)="695fda071e7408b36d96df3935ab45d4a5d39281d3a49da53e11f8c8b0ece169c7fc519781630bc8b22d252b96d40e7a9b1fcc13bfab87c367fbfc38ce8ab1682a540621df5062aa0c182ff3f5168e25f1933bb210604cebc460cedbee78817d3ca60ddcd6205083095dac4c7eb0dc2ac3f91b75a1f72db09c3d49f78d2abf5ea26cb6fc98a7f7acd37b6110771b0c502d0d6db2a483305f5f6341edf841a25c511dc821e385dd53db533499f8d334150a10b7c2afe5eb74d59f9d67a486df501a9fb6c1", 0xc4, 0xffffffffffffffff}, {&(0x7f0000000880)="ce549757ab859c460517fabb1f17b36e034571b5aaee7a4d66993acaeec7dbac5cee2cbdbef95ea1fb66fa843b575678f0f496209ac2398102a917dd2ce3a4ca551554de6f9c902c3670d7887f103306c418dfa06411ef7b30935c7783b5565759ce29caa6c36075452927", 0x6b, 0x40}], 0x2000000, &(0x7f00000009c0)={[{}, {'\x00'}, {}, {}, {'\x00'}, {'\x00'}, {'\x00'}, {'%:^&'}], [{@audit}, {@subj_role={'subj_role', 0x3d, '\x00'}}, {@dont_hash}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@seclabel}, {@dont_hash}, {@fowner_gt}, {@context={'context', 0x3d, 'system_u'}}, {@euid_gt={'euid>', 0xee01}}, {@uid_gt}]}) syz_io_uring_submit(r1, r4, &(0x7f0000000ac0)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, r5, 0x0, &(0x7f0000000a80)='./file0\x00', 0x0, 0x4b0081, 0x23456}, 0xffff) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:40 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r3) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 995.000559][T26407] loop3: detected capacity change from 0 to 16383 [ 995.016071][T26407] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 995.016591][T26407] qnx6: wrong signature (magic) in superblock #1. [ 995.016599][T26407] qnx6: unable to read the first superblock 01:39:40 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x81, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4}}, &(0x7f0000000140)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0x0, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc}}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="000312"], 0x0, 0x0, 0x0}, 0x0) 01:39:40 executing program 3: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r3) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 995.397197][ T6] usb 3-1: new high-speed USB device number 8 using dummy_hcd 01:39:40 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x38, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3c07b4d120b3994d67b"}, {0x10, 0x118, 0x96}], 0x48}, 0x40) 01:39:40 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r3) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 995.757310][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 01:39:41 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x81, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x9, {[@global, @main=@item_012={0x2, 0x0, 0x0, "98db"}, @main=@item_4={0x3, 0x0, 0x0, "ce743651"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="000312"], 0x0, 0x0, 0x0}, 0x0) [ 995.757330][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 995.757350][ T6] usb 3-1: New USB device found, idVendor=5543, idProduct=0081, bcdDevice= 0.00 01:39:41 executing program 3: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r3) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 995.757362][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.758793][ T6] usb 3-1: config 0 descriptor?? [ 995.986200][T26425] Error: Driver 'raw-gadget' is already registered, aborting... [ 995.986215][T26425] UDC core: USB Raw Gadget: driver registration failed: -16 [ 995.986232][T26425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 01:39:41 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x81, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x9, {[@global, @main=@item_012={0x2, 0x0, 0x0, "98db"}, @main=@item_4={0x3, 0x0, 0x0, "ce743651"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4}}, &(0x7f0000000140)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0x0, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc}}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="000312"], 0x0, 0x0, 0x0}, 0x0) [ 996.176961][T26429] Error: Driver 'raw-gadget' is already registered, aborting... [ 996.177108][T26429] UDC core: USB Raw Gadget: driver registration failed: -16 [ 996.177126][T26429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 996.357158][ T6] usbhid 3-1:0.0: can't add hid device: -71 [ 996.357244][ T6] usbhid: probe of 3-1:0.0 failed with error -71 [ 996.362341][ T6] usb 3-1: USB disconnect, device number 8 01:39:41 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x81, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x9, {[@global, @main=@item_012={0x2, 0x0, 0x0, "98db"}, @main=@item_4={0x3, 0x0, 0x0, "ce743651"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="000312"], 0x0, 0x0, 0x0}, 0x0) [ 996.827098][ T3680] usb 6-1: new high-speed USB device number 4 using dummy_hcd 01:39:42 executing program 3: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r3) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:42 executing program 0: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000540)={0xa, 0x0, 0x0, @empty}, 0x1c) io_setup(0xa6, &(0x7f0000000040)=0x0) io_submit(r2, 0x1, &(0x7f0000000240)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x58}]) 01:39:42 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x38, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3c07b4d120b3994d67b"}, {0x10, 0x118, 0x96}], 0x48}, 0x40) 01:39:42 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x38, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3c07b4d120b3994d67b"}, {0xd8, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f787a19296ba3800b84907da3b950fad1c3baf45a4cfb3a1c"}], 0x110}, 0x40) 01:39:42 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x81, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x9, {[@global, @main=@item_012={0x2, 0x0, 0x0, "98db"}, @main=@item_4={0x3, 0x0, 0x0, "ce743651"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4}}, &(0x7f0000000140)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0x0, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc}}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="000312"], 0x0, 0x0, 0x0}, 0x0) [ 996.925654][T26438] Error: Driver 'raw-gadget' is already registered, aborting... [ 996.925670][T26438] UDC core: USB Raw Gadget: driver registration failed: -16 [ 996.925686][T26438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 997.187316][ T3680] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 997.187339][ T3680] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 997.187360][ T3680] usb 6-1: New USB device found, idVendor=5543, idProduct=0081, bcdDevice= 0.00 [ 997.187373][ T3680] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 01:39:42 executing program 3: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r3) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 997.189036][ T3680] usb 6-1: config 0 descriptor?? 01:39:42 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x81, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x9, {[@global, @main=@item_012={0x2, 0x0, 0x0, "98db"}, @main=@item_4={0x3, 0x0, 0x0, "ce743651"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4}}, &(0x7f0000000140)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0x0, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc}}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="000312"], 0x0, 0x0, 0x0}, 0x0) 01:39:42 executing program 3: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r3) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 997.472291][T26449] Error: Driver 'raw-gadget' is already registered, aborting... [ 997.472305][T26449] UDC core: USB Raw Gadget: driver registration failed: -16 [ 997.472680][T26449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 01:39:42 executing program 3: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r3) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:42 executing program 3: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r3) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:42 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r3) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 998.379165][ T3680] uclogic 0003:5543:0081.0035: failed retrieving Huion firmware version: -71 [ 998.379210][ T3680] uclogic 0003:5543:0081.0035: failed probing parameters: -71 [ 998.379241][ T3680] uclogic: probe of 0003:5543:0081.0035 failed with error -71 [ 998.387309][ T3680] usb 6-1: USB disconnect, device number 4 01:39:44 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x38, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3c07b4d120b3994d67b"}, {0x10, 0x118, 0x96}], 0x48}, 0x40) 01:39:44 executing program 3: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r1) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:44 executing program 0: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000540)={0xa, 0x0, 0x0, @empty}, 0x1c) io_setup(0xa6, &(0x7f0000000040)=0x0) io_submit(r2, 0x1, &(0x7f0000000240)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x58}]) 01:39:44 executing program 1: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000540)={0xa, 0x0, 0x0, @empty}, 0x1c) io_setup(0xa6, &(0x7f0000000040)=0x0) io_submit(r2, 0x1, &(0x7f0000000240)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x58}]) 01:39:44 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r3) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:44 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x81, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x9, {[@global, @main=@item_012={0x2, 0x0, 0x0, "98db"}, @main=@item_4={0x3, 0x0, 0x0, "ce743651"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4}}, &(0x7f0000000140)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0x0, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc}}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="000312"], 0x0, 0x0, 0x0}, 0x0) 01:39:44 executing program 3: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r1) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 998.952790][T26471] __nla_validate_parse: 5 callbacks suppressed [ 998.952810][T26471] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 998.955153][T26471] validate_nla: 5 callbacks suppressed [ 998.955170][T26471] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 01:39:44 executing program 3: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r1) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:44 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r3) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:44 executing program 3: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r3) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 999.207355][ T3680] usb 6-1: new high-speed USB device number 5 using dummy_hcd 01:39:44 executing program 3: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r3) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:44 executing program 3: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r3) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 999.597400][ T3680] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 999.597432][ T3680] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 999.597467][ T3680] usb 6-1: New USB device found, idVendor=5543, idProduct=0081, bcdDevice= 0.00 [ 999.597489][ T3680] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.599371][ T3680] usb 6-1: config 0 descriptor?? 01:39:44 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x38, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3c07b4d120b3994d67b"}, {0x78, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c1"}], 0xb0}, 0x40) 01:39:44 executing program 3: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r3) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 999.856401][T26493] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 999.871059][T26493] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 01:39:45 executing program 0: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000540)={0xa, 0x0, 0x0, @empty}, 0x1c) io_setup(0xa6, &(0x7f0000000040)=0x0) io_submit(r2, 0x1, &(0x7f0000000240)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x58}]) 01:39:45 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r3) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:45 executing program 3: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r3) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 1000.710985][ T3680] input: HID 5543:0081 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:5543:0081.0036/input/input24 [ 1000.779153][ T3680] input: HID 5543:0081 Pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:5543:0081.0036/input/input25 [ 1000.783438][ T3680] input: HID 5543:0081 Touch Strip as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:5543:0081.0036/input/input26 [ 1000.786232][ T3680] input: HID 5543:0081 Dial as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:5543:0081.0036/input/input27 [ 1000.804648][ T3680] uclogic 0003:5543:0081.0036: input,hiddev0,hidraw0: USB HID v0.00 Keypad [HID 5543:0081] on usb-dummy_hcd.5-1/input0 [ 1000.972151][ T3688] usb 6-1: USB disconnect, device number 5 01:39:46 executing program 5: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000540)={0xa, 0x0, 0x0, @empty}, 0x1c) io_setup(0xa6, &(0x7f0000000040)=0x0) io_submit(r2, 0x1, &(0x7f0000000240)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x58}]) 01:39:46 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r3) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:46 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r3) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:46 executing program 3: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:46 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x38, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3c07b4d120b3994d67b"}, {0x78, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c1"}], 0xb0}, 0x40) 01:39:46 executing program 3: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 1001.576812][T26511] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1001.579645][T26511] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 01:39:46 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x81, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x9, {[@global, @main=@item_012={0x2, 0x0, 0x0, "98db"}, @main=@item_4={0x3, 0x0, 0x0, "ce743651"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4}}, &(0x7f0000000140)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0x0, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc}}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="000312"], 0x0, 0x0, 0x0}, 0x0) 01:39:46 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r3) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:47 executing program 3: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 1002.027307][ T3680] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1002.419707][ T3680] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1002.419740][ T3680] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1002.419772][ T3680] usb 6-1: New USB device found, idVendor=5543, idProduct=0081, bcdDevice= 0.00 [ 1002.419794][ T3680] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.423427][ T3680] usb 6-1: config 0 descriptor?? 01:39:47 executing program 0: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000540)={0xa, 0x0, 0x0, @empty}, 0x1c) io_setup(0xa6, &(0x7f0000000040)=0x0) io_submit(r2, 0x1, &(0x7f0000000240)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x58}]) 01:39:47 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r3) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:47 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) connect$vsock_stream(r0, &(0x7f0000000000), 0x10) io_uring_enter(0xffffffffffffffff, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:47 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r3) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:47 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x38, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3c07b4d120b3994d67b"}, {0x78, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c1"}], 0xb0}, 0x40) 01:39:47 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) connect$vsock_stream(r0, &(0x7f0000000000), 0x10) io_uring_enter(0xffffffffffffffff, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:47 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) connect$vsock_stream(r0, &(0x7f0000000000), 0x10) io_uring_enter(0xffffffffffffffff, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 1002.649535][T26530] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1002.650487][T26530] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 01:39:47 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r3) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:47 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 1003.570983][ T3680] input: HID 5543:0081 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:5543:0081.0037/input/input28 [ 1003.638864][ T3680] input: HID 5543:0081 Pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:5543:0081.0037/input/input29 [ 1003.641479][ T3680] input: HID 5543:0081 Touch Strip as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:5543:0081.0037/input/input30 [ 1003.644495][ T3680] input: HID 5543:0081 Dial as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:5543:0081.0037/input/input31 [ 1003.676924][ T3680] uclogic 0003:5543:0081.0037: input,hiddev0,hidraw0: USB HID v0.00 Keypad [HID 5543:0081] on usb-dummy_hcd.5-1/input0 [ 1003.829829][ T3680] usb 6-1: USB disconnect, device number 6 01:39:49 executing program 5: r0 = syz_io_uring_setup(0x3413, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1e7}, &(0x7f0000ee6000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock={0x28, 0x0, 0x0, @local}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) r4 = socket(0x29, 0x2, 0x0) ioctl$SIOCRSGCAUSE(r4, 0x89e2, 0xfffffffffffffffe) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x8}, 0x10001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index=0x7, 0x2, 0x0, 0x8}, 0x4000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f00000003c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000240)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2}, 0x7ff) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x45) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000380)=@md5={0x1, "7fcc3cc4b41f3129e8ed65504dd6f85d"}, 0x11, 0x0) 01:39:49 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:49 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r3) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:49 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r3) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:49 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x38, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3c07b4d120b3994d67b"}, {0xa8, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773d"}], 0xe0}, 0x40) 01:39:49 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000001340), 0x101400, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001380)={&(0x7f0000000180)="598714d06b8968d1a9a4453ddb97f04ecc4e9e178a3e031384501de004279f89f3bb0f8b2257fda97ed7a57c4395f6700a22690252bef6b938304a", &(0x7f0000000340)=""/4096, &(0x7f0000000240)="bce8e8535a7e2d38cf4485bcde9706d3e294b3fce91412a149f2e86f7ceed4f7bc78bbad", &(0x7f0000000280)="67b3fe23c8bacb484ec96cd9ff29b41533c1573fb9ba85c4943ea800bcf25af5d76f42703591da47af3c73cea9", 0x10001, r3}, 0x38) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:49 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r2) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:49 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 1004.443221][T26552] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1004.448133][T26552] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 01:39:49 executing program 3: r0 = syz_io_uring_setup(0x570, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:49 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r2) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:50 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r3) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:50 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000001340), 0x101400, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001380)={&(0x7f0000000180)="598714d06b8968d1a9a4453ddb97f04ecc4e9e178a3e031384501de004279f89f3bb0f8b2257fda97ed7a57c4395f6700a22690252bef6b938304a", &(0x7f0000000340)=""/4096, &(0x7f0000000240)="bce8e8535a7e2d38cf4485bcde9706d3e294b3fce91412a149f2e86f7ceed4f7bc78bbad", &(0x7f0000000280)="67b3fe23c8bacb484ec96cd9ff29b41533c1573fb9ba85c4943ea800bcf25af5d76f42703591da47af3c73cea9", 0x10001, r3}, 0x38) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:50 executing program 5: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r5, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:50 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r3) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:50 executing program 3: r0 = syz_io_uring_setup(0x570, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:50 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r2) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:50 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x38, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3c07b4d120b3994d67b"}, {0xa8, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773d"}], 0xe0}, 0x40) 01:39:50 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r3) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:50 executing program 3: r0 = syz_io_uring_setup(0x570, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 1005.455607][T26583] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1005.456420][T26583] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 01:39:50 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r3) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:50 executing program 3: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000000c0)=0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) connect$vsock_stream(r2, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:50 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) syz_io_uring_setup(0x3b0, &(0x7f0000000240)={0x0, 0xd8ba, 0x4, 0x2, 0x179, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000180)) r5 = socket(0x29, 0x2, 0x0) ioctl$SIOCRSGCAUSE(r5, 0x89e2, 0xfffffffffffffffe) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000380)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd_index=0x4, 0xdece, {0x0, r5}, 0x20, 0x0, 0x1, {0x0, 0x0, r6}}, 0x40) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:50 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r3) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:51 executing program 3: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000000c0)=0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) connect$vsock_stream(r2, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:51 executing program 5: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r5, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:51 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r3) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:51 executing program 3: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000000c0)=0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) connect$vsock_stream(r2, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:51 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r3) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:51 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r5, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:51 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x38, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3c07b4d120b3994d67b"}, {0xa8, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773d"}], 0xe0}, 0x40) 01:39:51 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r3) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:51 executing program 3: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) connect$vsock_stream(r2, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:51 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r3) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 1006.416577][T26610] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1006.429304][T26610] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 01:39:51 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r3) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:51 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r3) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:52 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r5, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:52 executing program 5: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r5, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:52 executing program 3: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) connect$vsock_stream(r2, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:52 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r2) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:52 executing program 3: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) connect$vsock_stream(r2, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:52 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x38, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3c07b4d120b3994d67b"}, {0xc0, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f"}], 0xf8}, 0x40) 01:39:52 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r3) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:52 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r2) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:52 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r5, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:52 executing program 3: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)=0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) connect$vsock_stream(r2, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 1007.300214][T26637] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1007.301562][T26637] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 01:39:52 executing program 5: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r3) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:52 executing program 3: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)=0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) connect$vsock_stream(r2, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:52 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r2) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:52 executing program 3: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)=0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) connect$vsock_stream(r2, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:53 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:53 executing program 3: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) r2 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) connect$vsock_stream(r2, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:53 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:53 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x38, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3c07b4d120b3994d67b"}, {0xc0, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f"}], 0xf8}, 0x40) 01:39:53 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:53 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r3) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:53 executing program 3: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) r2 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) connect$vsock_stream(r2, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:53 executing program 5: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r3) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:53 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 1008.355506][T26671] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1008.359646][T26671] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 01:39:53 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r3) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:53 executing program 3: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) r2 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) connect$vsock_stream(r2, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:53 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) connect$vsock_stream(r5, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:53 executing program 5: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r3) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:53 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) connect$vsock_stream(r5, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:53 executing program 3: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:54 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x38, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3c07b4d120b3994d67b"}, {0xc0, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f"}], 0xf8}, 0x40) 01:39:54 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:54 executing program 3: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:54 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r3) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:54 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) connect$vsock_stream(r5, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:54 executing program 5: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r3) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:54 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r3) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 1009.179832][T26705] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1009.180664][T26705] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 01:39:54 executing program 3: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:54 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:54 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:54 executing program 3: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:54 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:55 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x38, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3c07b4d120b3994d67b"}, {0xc8, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f787a19296ba3800b84907da3"}], 0x100}, 0x40) 01:39:55 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r3) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:55 executing program 5: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r3) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:55 executing program 3: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:55 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:55 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 1010.095436][T26738] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1010.096854][T26738] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 01:39:55 executing program 3: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:55 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:55 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r3) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:55 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:55 executing program 3: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:55 executing program 5: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r3) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:56 executing program 3: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:56 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:56 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:56 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x38, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3c07b4d120b3994d67b"}, {0xc8, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f787a19296ba3800b84907da3"}], 0x100}, 0x40) 01:39:56 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r3) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:56 executing program 5: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r3) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:56 executing program 3: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:56 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 1011.090856][T26776] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1011.091723][T26776] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 01:39:56 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r5, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:56 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff08000400", 0x32}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x38, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3c07b4d120b3994d67b"}, {0xd8, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f787a19296ba3800b84907da3b950fad1c3baf45a4cfb3a1c"}], 0x110}, 0x40) 01:39:56 executing program 3: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:56 executing program 3: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:56 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r3) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:56 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r3) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 1011.570929][T26788] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 01:39:57 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x38, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3c07b4d120b3994d67b"}, {0xc8, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f787a19296ba3800b84907da3"}], 0x100}, 0x40) 01:39:57 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r5, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:57 executing program 3: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:57 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r3) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:57 executing program 3: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) connect$vsock_stream(r3, 0x0, 0x0) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:57 executing program 3: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) connect$vsock_stream(r3, 0x0, 0x0) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 1012.029873][T26808] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1012.030764][T26808] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 01:39:57 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r3) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:57 executing program 5: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:57 executing program 3: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) connect$vsock_stream(r3, 0x0, 0x0) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:57 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r5, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:57 executing program 3: syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) connect$vsock_stream(r2, &(0x7f0000000000), 0x10) io_uring_enter(0xffffffffffffffff, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:57 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r3) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:58 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x38, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3c07b4d120b3994d67b"}, {0xd0, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f787a19296ba3800b84907da3b950fad1c3ba"}], 0x108}, 0x40) 01:39:58 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:58 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) dup(r3) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:58 executing program 3: syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) connect$vsock_stream(r2, &(0x7f0000000000), 0x10) io_uring_enter(0xffffffffffffffff, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:58 executing program 5: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r5, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:58 executing program 3: syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) connect$vsock_stream(r2, &(0x7f0000000000), 0x10) io_uring_enter(0xffffffffffffffff, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 1012.998992][T26843] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1013.000519][T26843] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 01:39:58 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r1, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r1, &(0x7f0000000000), 0x10) io_uring_enter(0xffffffffffffffff, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:58 executing program 3: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:58 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) dup(r3) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:58 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:58 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r1, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r1, &(0x7f0000000000), 0x10) io_uring_enter(0xffffffffffffffff, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:58 executing program 3: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:58 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x38, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3c07b4d120b3994d67b"}, {0xd0, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f787a19296ba3800b84907da3b950fad1c3ba"}], 0x108}, 0x40) 01:39:58 executing program 5: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r5, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:58 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r1, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r1, &(0x7f0000000000), 0x10) io_uring_enter(0xffffffffffffffff, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:59 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:59 executing program 3: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:59 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) dup(r3) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:59 executing program 2: r0 = syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r3) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 1013.916886][T26871] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 01:39:59 executing program 3: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 1013.928142][T26871] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 01:39:59 executing program 2: r0 = syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r3) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:59 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:59 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x38, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3c07b4d120b3994d67b"}, {0xd0, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f787a19296ba3800b84907da3b950fad1c3ba"}], 0x108}, 0x40) 01:39:59 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:39:59 executing program 3: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) dup(r3) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 1014.885804][T26888] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1014.898024][T26888] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 01:40:00 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000180)=[0xffffff83, 0x6, 0x8, 0xd180, 0x1], 0x5, 0x80000, 0x0, 0xffffffffffffffff}) sendmsg(r2, &(0x7f0000000980)={&(0x7f0000000340)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x80, &(0x7f0000000600)=[{&(0x7f00000003c0)="14f9188f31eb5c8ee50a09b9b568a152874ac6b454ea15ee56f9ac5e74d8c0ccf9196e6cf7b74d39f03a71f096d2cec3e580771262260ba102963546f09e8353911df9c83ff79d11dd934f8c0e7c4ccd", 0x50}, {&(0x7f0000000440)="b105c501e7f1cbd40c2eb0635698f4af67247b1522462c4021785ee98703ccfaf55d2fa46ae42050f0fe676c4bcaad31859f86b74621a88c6eaf11aad9a3daa49ab7ac6b99370e79d19d547bb27f222870d35939f106f10f431d49ab8746dd208d573d0e75ab39e162a8003cea4aaa141649263db03a0dff01efae38f2197657bc77ce06018d6f31a4b1728151ff2012f7fc3f2f524258abceecf274df703602884556b5bf60b5976ec53737609c878a74c8ea48f93a46ee3d1d4b4c0d1e1312889d8aa5b3341c18a2f681983cf8", 0xce}, {&(0x7f0000000540)="3b95a194e90c46ce1247076a15f082194cab271cb6003112878c6c30b6eef776c94f75edd187f364b2f1bfdcc58a845b7a0e55e8b9b21a4e6f3e96dd85342e5487648392ef885f97df829f80ef73cd211f1e9710d69e24886c9c11a8ce3fb13df05de201118aadbae18541e0fcb95b37b4a6b2e7e5178248363447b77ff6dde674b7aa96491cfbdb2cb7ef0678b6fd0a778c86261ba14890ad612f76026a6bf1e1f0249d077c7a4c7fab769f3aac05", 0xaf}, {&(0x7f0000000280)="cf8a16834fd0a0ee", 0x8}], 0x4, &(0x7f0000000640)=[{0xc0, 0x101, 0x3ff, "9c8ceaf88fa4844ce55acf83153b11c7a4714d1338799fcef1dd31a699c9d3ffa81f6ab1bfb7fb6d84e327b5e6e37a68ede948cdc6931582ddfaff0974a0c38c752b2465b0bb948ed1ffcb08e5af2f321eccd6299a9348dd119912ddeed5e1ec729808cf675aef06185ce0412376738a5842d4d6dd19b646d79d3af3c26bd0b711901e274be8833f9c53da8c9ce7d46f9f4f999a5edfc5d86d57874b488ebb5a3b60f62845511464fcffe5"}, {0x108, 0x10a, 0x2, "829a2e52b78f7b35a390c5830297cb4da8e3ac769f9c611d28298b900e87fa271d21868dafcd535cc2c1ee96e93342fd60c921865b08bd586c79b3ebf6414c6b31a5f36d4ef133a2f1ffe24bc8e774e45227fcd6c2ecb6f6f73d90274f0c0c20ff78dd86d760c09358595a732cb72a34c5d0dddc66886b87fb71d33b936915c6d60022aa351e35b5e7d329a0e003bf25820be489de886e3b1951350ec72a4478a8b8d3bd244224b3b39b22a7fd3c0d2b23d89e93d0fac7745c9b1924d235905adc22d94e129626306193bfd76660e8e866b741eb8ad1570b6562514f4e89e36efa2418e0313de7d26afa1c770a64891d772c70008a"}, {0xd0, 0x84, 0xff, "1b63d9ead16c8bab828f18419e5d8351fca9843b7142968412cf5c6087cbf9a12f472f088f24c1b408ac2a11fdfbc7483d401e9e866b77e42f5eff3fb772f43b512703876d926b124dfff5ccf2faa8a2e64ba6553408b5eb2834290247dd51cbc6dea76c0c08b1d223f47f2dc7c2092b760564acf301092306ba8ae92f229625a6c101796d04e6d37b1d4adbcd151a338c09f1354ba1848688c26d3921bb2f75ed3498305bae0f77c4eec2f8bfb9e9fcf49d2e8ca85760c47b4094f4"}, {0x70, 0x119, 0xa38, "44388e84f4475549a6bd76c77d0aabc981a82034277cfee8943beb9346f7cef2d77d73b33a9f0288f518ab392296029d18e84e33fe1d65553d0a1267fc5d5e4789e0d03c7e3e0fc334bfba2bf5e2fe36dbd2ed187b773a97d346bf2e"}], 0x308}, 0x4) r3 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r6, &(0x7f0000000000), 0x10) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000a40)={@private2, 0x0}, &(0x7f0000000a80)=0x14) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) r11 = accept4$alg(r10, 0x0, 0x0, 0x0) splice(r8, 0x0, r11, 0x0, 0x200000, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r12, &(0x7f0000000380)={'#! ', './file0', [], 0xa, "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"}, 0x805) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x13, 0x4, &(0x7f00000009c0)=@raw=[@exit, @alu={0x4, 0x0, 0xd, 0x1, 0x5, 0xffffffffffffffc0, 0x1}, @map_fd={0x18, 0x6}], &(0x7f0000000a00)='GPL\x00', 0x81, 0x0, 0x0, 0x40f00, 0x2, '\x00', r7, 0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000ac0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000b00)={0x0, 0x5, 0x5, 0x7}, 0x10, 0xffffffffffffffff, r8, 0x0, &(0x7f0000000b40)=[r12, r0]}, 0x80) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:00 executing program 2: r0 = syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r3) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:00 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000180)=[0xffffff83, 0x6, 0x8, 0xd180, 0x1], 0x5, 0x80000, 0x0, 0xffffffffffffffff}) sendmsg(r2, &(0x7f0000000980)={&(0x7f0000000340)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x80, &(0x7f0000000600)=[{&(0x7f00000003c0)="14f9188f31eb5c8ee50a09b9b568a152874ac6b454ea15ee56f9ac5e74d8c0ccf9196e6cf7b74d39f03a71f096d2cec3e580771262260ba102963546f09e8353911df9c83ff79d11dd934f8c0e7c4ccd", 0x50}, {&(0x7f0000000440)="b105c501e7f1cbd40c2eb0635698f4af67247b1522462c4021785ee98703ccfaf55d2fa46ae42050f0fe676c4bcaad31859f86b74621a88c6eaf11aad9a3daa49ab7ac6b99370e79d19d547bb27f222870d35939f106f10f431d49ab8746dd208d573d0e75ab39e162a8003cea4aaa141649263db03a0dff01efae38f2197657bc77ce06018d6f31a4b1728151ff2012f7fc3f2f524258abceecf274df703602884556b5bf60b5976ec53737609c878a74c8ea48f93a46ee3d1d4b4c0d1e1312889d8aa5b3341c18a2f681983cf8", 0xce}, {&(0x7f0000000540)="3b95a194e90c46ce1247076a15f082194cab271cb6003112878c6c30b6eef776c94f75edd187f364b2f1bfdcc58a845b7a0e55e8b9b21a4e6f3e96dd85342e5487648392ef885f97df829f80ef73cd211f1e9710d69e24886c9c11a8ce3fb13df05de201118aadbae18541e0fcb95b37b4a6b2e7e5178248363447b77ff6dde674b7aa96491cfbdb2cb7ef0678b6fd0a778c86261ba14890ad612f76026a6bf1e1f0249d077c7a4c7fab769f3aac05", 0xaf}, {&(0x7f0000000280)="cf8a16834fd0a0ee", 0x8}], 0x4, &(0x7f0000000640)=[{0xc0, 0x101, 0x3ff, "9c8ceaf88fa4844ce55acf83153b11c7a4714d1338799fcef1dd31a699c9d3ffa81f6ab1bfb7fb6d84e327b5e6e37a68ede948cdc6931582ddfaff0974a0c38c752b2465b0bb948ed1ffcb08e5af2f321eccd6299a9348dd119912ddeed5e1ec729808cf675aef06185ce0412376738a5842d4d6dd19b646d79d3af3c26bd0b711901e274be8833f9c53da8c9ce7d46f9f4f999a5edfc5d86d57874b488ebb5a3b60f62845511464fcffe5"}, {0x108, 0x10a, 0x2, "829a2e52b78f7b35a390c5830297cb4da8e3ac769f9c611d28298b900e87fa271d21868dafcd535cc2c1ee96e93342fd60c921865b08bd586c79b3ebf6414c6b31a5f36d4ef133a2f1ffe24bc8e774e45227fcd6c2ecb6f6f73d90274f0c0c20ff78dd86d760c09358595a732cb72a34c5d0dddc66886b87fb71d33b936915c6d60022aa351e35b5e7d329a0e003bf25820be489de886e3b1951350ec72a4478a8b8d3bd244224b3b39b22a7fd3c0d2b23d89e93d0fac7745c9b1924d235905adc22d94e129626306193bfd76660e8e866b741eb8ad1570b6562514f4e89e36efa2418e0313de7d26afa1c770a64891d772c70008a"}, {0xd0, 0x84, 0xff, "1b63d9ead16c8bab828f18419e5d8351fca9843b7142968412cf5c6087cbf9a12f472f088f24c1b408ac2a11fdfbc7483d401e9e866b77e42f5eff3fb772f43b512703876d926b124dfff5ccf2faa8a2e64ba6553408b5eb2834290247dd51cbc6dea76c0c08b1d223f47f2dc7c2092b760564acf301092306ba8ae92f229625a6c101796d04e6d37b1d4adbcd151a338c09f1354ba1848688c26d3921bb2f75ed3498305bae0f77c4eec2f8bfb9e9fcf49d2e8ca85760c47b4094f4"}, {0x70, 0x119, 0xa38, "44388e84f4475549a6bd76c77d0aabc981a82034277cfee8943beb9346f7cef2d77d73b33a9f0288f518ab392296029d18e84e33fe1d65553d0a1267fc5d5e4789e0d03c7e3e0fc334bfba2bf5e2fe36dbd2ed187b773a97d346bf2e"}], 0x308}, 0x4) r3 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r6, &(0x7f0000000000), 0x10) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000a40)={@private2, 0x0}, &(0x7f0000000a80)=0x14) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) r11 = accept4$alg(r10, 0x0, 0x0, 0x0) splice(r8, 0x0, r11, 0x0, 0x200000, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r12, &(0x7f0000000380)={'#! ', './file0', [], 0xa, "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"}, 0x805) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x13, 0x4, &(0x7f00000009c0)=@raw=[@exit, @alu={0x4, 0x0, 0xd, 0x1, 0x5, 0xffffffffffffffc0, 0x1}, @map_fd={0x18, 0x6}], &(0x7f0000000a00)='GPL\x00', 0x81, 0x0, 0x0, 0x40f00, 0x2, '\x00', r7, 0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000ac0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000b00)={0x0, 0x5, 0x5, 0x7}, 0x10, 0xffffffffffffffff, r8, 0x0, &(0x7f0000000b40)=[r12, r0]}, 0x80) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:00 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:00 executing program 2: r0 = syz_io_uring_setup(0x570, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r3) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:00 executing program 2: r0 = syz_io_uring_setup(0x570, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r3) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:00 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:00 executing program 2: r0 = syz_io_uring_setup(0x570, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r3) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:00 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x38, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3c07b4d120b3994d67b"}, {0xd0, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f787a19296ba3800b84907da3b950fad1c3baf45a4c"}], 0x108}, 0x40) 01:40:00 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:00 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r2) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:01 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 1015.829488][T26919] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1015.831432][T26919] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 01:40:01 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r2) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:01 executing program 5: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:01 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x38, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3c07b4d120b3994d67b"}, {0xd0, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f787a19296ba3800b84907da3b950fad1c3ba"}], 0x108}, 0x40) 01:40:01 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r2) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:01 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r0 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r0, &(0x7f0000000000), 0x10) io_uring_enter(0xffffffffffffffff, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 1016.171417][T26931] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1016.173230][T26931] netlink: 'syz-executor.3': attribute type 4 has an invalid length. 01:40:01 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r2) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:01 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:01 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r0 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r0, &(0x7f0000000000), 0x10) io_uring_enter(0xffffffffffffffff, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:01 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x38, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3c07b4d120b3994d67b"}, {0xd0, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f787a19296ba3800b84907da3b950fad1c3baf45a4c"}], 0x108}, 0x40) 01:40:01 executing program 5: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:01 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r2) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:01 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r0 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r0, &(0x7f0000000000), 0x10) io_uring_enter(0xffffffffffffffff, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:02 executing program 5: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 1016.839773][T26958] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1016.840804][T26958] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 01:40:02 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r2) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:02 executing program 3: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r2) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:02 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:02 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:02 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r3) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:02 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x38, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3c07b4d120b3994d67b"}, {0xd0, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f787a19296ba3800b84907da3b950fad1c3ba"}], 0x108}, 0x40) 01:40:02 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 1017.346553][T26979] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1017.359430][T26979] netlink: 'syz-executor.3': attribute type 4 has an invalid length. 01:40:02 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x38, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3c07b4d120b3994d67b"}, {0xd0, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f787a19296ba3800b84907da3b950fad1c3baf45a4c"}], 0x108}, 0x40) 01:40:02 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf21}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r0}, 0x48) fcntl$dupfd(r0, 0x0, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x1, 0xbf22}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r2}, 0x48) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="8510000003800000"], &(0x7f0000000540)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x4, 0xffffffa0, 0x6ebd}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff, r3]}, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf21}, 0x48) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) fcntl$dupfd(r4, 0x0, r5) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x4}, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r6 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, 0x0, 0x0, 0x4) io_uring_enter(r6, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:02 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:02 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r3) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:02 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 1017.738263][T26991] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1017.739571][T26991] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 01:40:03 executing program 1: r0 = syz_io_uring_setup(0x570, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:03 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r3) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:03 executing program 1: r0 = syz_io_uring_setup(0x570, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:03 executing program 3: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x0, 0x141101) dup(r3) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:03 executing program 1: r0 = syz_io_uring_setup(0x570, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:03 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:03 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r2 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r2, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:03 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x38, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3c07b4d120b3994d67b"}, {0xd8, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f787a19296ba3800b84907da3b950fad1c3baf45a4cfb3a"}], 0x110}, 0x40) 01:40:03 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf21}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r0}, 0x48) fcntl$dupfd(r0, 0x0, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x1, 0xbf22}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r2}, 0x48) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="8510000003800000"], &(0x7f0000000540)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x4, 0xffffffa0, 0x6ebd}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff, r3]}, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf21}, 0x48) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) fcntl$dupfd(r4, 0x0, r5) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x4}, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r6 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, 0x0, 0x0, 0x4) io_uring_enter(r6, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:03 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x0, 0x0) dup(r3) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:03 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r4, &(0x7f0000000380)={'#! ', './file0', [], 0xa, "8131187ac359eac651da61f596ddd2481f55e697e4d8d9ca393f7a9fe38c203187e8406e2fc2598c844f11e20e649745c234326a2d5dee714ccf23ebbcd759298d30d58e81615ff992ed82ad3bd018c29928ef4d97df9b6ef4c0af0a6aaf89a31a83ea89d31d7821236786d3a99258f759bfdc4f6ff2f7bccf52f0ac7c5474c65dcc614c1d324ab6b6996ea8ae86ea9b2e7521574c89573fe93ac3339ac38b443f3ce0cf3dadb5d523fd446ae127e03f609f269855f701922255bd3de8c7df8c2ac8acf2ba850bb198a1ec381b30dec084ca170732947a667eb9f050ef9ed8613be902b777fd76ebdaea1839eef28195b3e482569e0a8721ff62b07d75e35b9af9f3c37ca32f110ce06e831610fbe253a5838e13f873d14030cd4a38eb5d5b9c3ee6b5cacd5a97f963cbdac7d36bdd4907a4b876ac1011f8cd415803af26279729a6631fe31bd22a813640e555792f49a83c4cb824b19e72789c60604a1259ea0e19ebce9ad9c70523de966a5d3ef1d6a6f2ab069be96dd69bb987bbc74eadeea4e0b7829f07d7d541dcebdecaf21a19a0602b881d9e33fdddcb33116e1717b7fc4b87626cdca46b44859ca172936229a52151e9a3cecd9d5c7fe56bdfa812dc0f79332d1d892ae9249f8645fb91943cf4edb2c82fc516282093357f428360a76170698418b1330f85d680497ba790f6e88409d10b3fbc12ae9bcedb7980a62428eefdc7935b39ac80aefbeefc6a03c9d4bbc2430d41a3b529550a53d216ef00f88626195c9a0f885a3f5843aaa0587b368073cb3f62d34409d223184caed619c90057fdd3ef7db70d382861a6bbe13aca6be7461629683d31c9b37cec28feb17bc0b60f120e78f04dda92f73d1c5a7940f4b0d0a673a301459e7e79f77e6f78bee660dbc9f475f126ac9b951f5f947022d74be4e08d7924a464c7a7b6231ca74a75eeade97c98c5ea60796ee186dab1e0eb991e42084a992bf3900651fb367dac90ab25071beff105e3538efe389f6b9cecc8a31f1545fa3b154c029a6f58f109563acffa7a7cccc28f3be4052c1e8e1d83c7b50e6ff11d49490a1b0c07ebd033c854467ec114df0ff206af0359bf06c34f8753bf94ed5c023eebe3b6dbf72d9281ad7dc818f23b56168d2684b1d674cb108d58aed6018e414a8f47e2830194653937eac9b64dae2f220b120bce448afd4c56f6085b107d19bdb59e440256da2d8ee88a75283648abb4dfc377cf7ca33409d3ae83e34fa8bd97137e5599b9995ff6bf7e2a3e6d07cd206551e4d5c7771c775d0cebdbed43327eb04bbc47f6bd1685f72f00b3b8fa5ae54a1c21e56cc4e3972e135f88ef10624bc0c4813b71e9caccba33f70a0d6e77c25eed4442d2dd6f5897460f74f28baa8d9e1adcab26444c536e67aaf7ea86d627f416f5b489f85234de576d2e775a98f5a0aafb1de41bd9a4e63491b2db36a2e6ea7cae6f3091f285b2f7144c5f705ff55ee5571536cf7ff67da5dcea7e12fb8884e7754a18eb1b4449dd43de4113ce8c95cfa9e45838e53594a60ae1e58664c2940aef7379ea186e0a432985c9fb49fdfe8592b1f26d78fb14ea514207912b14acb10848cc2a96f0d2f5cb18dd5f9eb608b1d967d074295a232f49926caae816dbbd1fae14ef19d2c1ffe1fe8377d9f139b200bbee9177747430fb6992fb7b5be057079e81c128fdcc0d5968f0eac30d6136451f97e7849aa74022d8793cebf543fee1dcb4b2de7b9c61a79b0c520cf63b556bb4ba90c3d033613b856618384623be7a701b491b97384ff5231b8feb9eceaa39115cd36e41e2c8d406f462ba12648130d6cec40772c3293cdc4b072933ec3b78e5ecdc229daaba12033d6453b2845c1ef781d2bb47999cba22e4ba27478b1e56cd3c214156144457c0ab03a20a709bfcc87276bcaceaa215fbfe2fcf6edda012db44adb36db589043e65d8ee4fad01df52b8b5bd004fd37f3e9e09cf17f8638dff755eac436e9a0dbe5434752cdc8c62b0db9b84b6b2d1064a20aef5785ebe4020427a2951bd8bb62eacb299e50344804545ecddce6a7d8b0ce6acb931f924595e79af50108742358fb19b9ea2d1d806c1c3cbf058482a23718137d4fe7498989a7514a89df9c6a014a2d9727248202b332bd60720dc1f3c29c89997e891df06702e32cf13c73902ae1e757435bbf090a6d53f6b9c544151c31657ae7ad6e5bda2bf9990c1a6bb33494bc3c98820317e4ac25b34bae4b92e058ee7f1f2cd6107443bcd262aaf4494a4a9bbe11c5e80d3e0c68e5620ae8273cf1a43f942b46cb9e0e44c1ba2e07c54f131a115baea8c0f426c36326664c9d663aec4ce4c350417162137ac3aa52bbefd519a9153fe6dada5eb91a2f520b1794fd122c10bfc8671bbe9c1d0195cbcb2ecd1857089824e32ba0b5be83494e7107f2af6b0986b95f572b2bee7f2b8bbbf929d12c166e2026c26890fa02205535a13ef5052a754aa40d635ec26138892bd8f1c694db0bc9346ad8a8fe66a9cdbc4238c7ccaac2549db19c4a24b7c50d888ce2444f5773f997e8832562f9b2020a1f298e183d66c0010278e5ad912dd7719ca00024df179b7c271549d152d234d563f9c57ba05dd8ce538da862b681b1f3e951dc62d15b147d2238e57645e79a467b0349459b0c798912fb334cf38e982886831d4565dc4e54288a5ebbfdecb1d59a0f85bd402f66371fb1e8fd4dc2077cd14c8027752a853fc98e9dc7f46d75f4da3b779e11c72553aeac72de8b63a78712552732d31a7f84fe332a56dbbbb72b8b11ba1f34d2995297667bec89dbd9925765718455d994ae7ad2870be36c637fa5e9c6c2ab9c96f02e28435530ebc1311af48657c2f34b75b1c71baa3d8e58eddde3d11e1ac"}, 0x805) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x50, r4, 0x10000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:03 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r2 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r2, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 1018.707361][T27024] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1018.709331][T27024] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 01:40:04 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:04 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r2 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r2, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:04 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x0, 0x0) dup(r3) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:04 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r4, &(0x7f0000000380)={'#! ', './file0', [], 0xa, "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"}, 0x805) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x50, r4, 0x10000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:04 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r2 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r2, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:04 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r0 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r0, &(0x7f0000000000), 0x10) io_uring_enter(0xffffffffffffffff, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:04 executing program 5: r0 = syz_io_uring_setup(0x570, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r5, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:04 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x38, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3c07b4d120b3994d67b"}, {0xd8, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f787a19296ba3800b84907da3b950fad1c3baf45a4cfb3a"}], 0x110}, 0x40) 01:40:04 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r0 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r0, &(0x7f0000000000), 0x10) io_uring_enter(0xffffffffffffffff, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:04 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r2 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r2, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:05 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 1019.708481][T27060] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1019.728469][T27060] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 01:40:05 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{0x0}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x38, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3c07b4d120b3994d67b"}, {0xd8, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f787a19296ba3800b84907da3b950fad1c3baf45a4cfb3a1c"}], 0x110}, 0x40) 01:40:05 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r0 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r0, &(0x7f0000000000), 0x10) io_uring_enter(0xffffffffffffffff, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:05 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r2 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r2, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 1020.144901][T27069] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 01:40:05 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:05 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:05 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:05 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x38, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3c07b4d120b3994d67b"}, {0xd8, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f787a19296ba3800b84907da3b950fad1c3baf45a4cfb3a"}], 0x110}, 0x40) 01:40:05 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{0x0}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x38, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3c07b4d120b3994d67b"}, {0xd8, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f787a19296ba3800b84907da3b950fad1c3baf45a4cfb3a1c"}], 0x110}, 0x40) 01:40:05 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 1020.589692][T27083] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1020.618830][T27086] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1020.619799][T27086] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 01:40:05 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:06 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:06 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:06 executing program 3: r0 = syz_io_uring_setup(0x570, &(0x7f0000000240)={0x0, 0x4bb2, 0x1, 0x4, 0x18a}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f00000002c0), 0x10) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r5 = socket(0x29, 0x2, 0x0) ioctl$SIOCRSGCAUSE(r5, 0x89e2, 0xfffffffffffffffe) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, r5, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@llc={0x1a, 0x30d, 0x80, 0x3, 0x6, 0x6}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)="a48522a5fb5434a626d2119eb91954c0dd26e4a5bc34885897ca80c9066a20f4024a855297a0d251d0f17a461b5eaf4d254be7fedb2ed02d7cc8431cced80786b6d6c585e394a1739e9e929517fe24341d31953d2885bd804c0f8b4f7db8ad239150805f4335fa655ed4ffe0406465ae717714c698f4d53851f6dc8d0311212969fb6158b1bb226c1acf1abc21bcbe0a93ee13dbe9bf679ef6c382c60d7ef6742f6429366457aa36726cc89bcccfe2224e6c0164650079692ddcdd9a7fc4100e23fe19e816e6a885492a22150ef6e4bb8a7754a20634a5a0e003edd7d5c516c26991dc11ab00cdcc14603bb5fb42", 0xee}, {&(0x7f0000000440)="7941a8f43ee8ad952d881297ce59c28b67c5caff2a916fe2616969c70e96082a1d805e3567c18b1bce7f6821701983dd8ae477767a143db1826dedb7507bbb644cb8b8a08b47ca3ec54e92b818b5b98f43fa01bcdee6b46df9e2971bf4c591098f8650199945c0f884ca19a511fa5d555e9ce7a629c42a389dedaf85aa519ea75b87f04635b6d377212ae5c031726064ec60bbc2e6939ba512bb0253ff6090885e7a3f62c0493cccf7a8443612a0c9404af3cce297f1a8c56a34418075b3b109683e7a7b58a999f6b11d", 0xca}, {&(0x7f0000000540)="65ac4b5435d6ffc8b26139deef3e922bc8c305603fcd6ff96f0ed180d2c72d8be15217c2fbec5340e0b2f548367a0d04a2ba612f08bd6ab438e9598a5a46a06afa417cb0cd3bd2b62a3d5b5f4b27a3da3138d559d7dc552b3d64124f608bc21746547b3ebbc78b1b7dae03045c5902e1e7c3b9668716e04535d3df40def9769bc6f487010d804c5555d92aa65f716b31c0bb0e2ddded107cfe62054a5c0cb2a9e36a162b3481a54d3f6b9309238432f9d2d8843904581c2f815cf5b966f319a69f54e92cae1e91188686c4f1684544707f97ab4cea3cea93141063e82e8ada5b8616664de45dd30433e8da5f8c", 0xed}, {&(0x7f0000000640)="47befbd6881b529f173db751bab2f92d98440289c781b075be076df6925d9f4a9cd624601acecbd5000357156bf24fb45432bf67b9f188916589deeb3cf384ec9675412b9de5acbadfd776780f43f80478d11f8a666c1414ebab", 0x5a}, {&(0x7f0000000040)="2716828c48ae7e15323c4c20571939facaecb4e95436ee41eec3fdb0878f35646f81a6d3d1cc", 0x26}, {&(0x7f00000006c0)="fc31bb5eb1f0db311e18a4505595783316ae1149331af6da3bd26f906ec9aa01bf3402eb07b3b8f63fc5f34b23d4f8dd17a2ece1c46eb4231a49b20d88978a6ae967d85a3a127244f44b7caf6268b17ad3316c33de63a61d43946104a0a1e54ea9d8e2c44c1284205dfa290fdba64ea61ad048810a45804a7fa0ed90a6ec9efef618c42c6da47831d13db89c1c97be2f4517ca50dba400405d4bcb3fa08a7a0db66648352997dc538f12aa01c2851bddb45f70a6161317bff2b044dd913aa61cb2d2", 0xc2}, {&(0x7f00000007c0)="8730720625b6d6c034f8807c9d62a541aab98fb8acb681395e05e1c5bdade25c735c0a157b2ed79de35415fbeead593608778cf6b578efb576bcb0e7320c820762fd92fa63f9ea93c8bc3303dde3b1a6e76be935c1d306805d52e2e74f976ad48e6196443514ec413b047db7ea725e4a52db5bd171fdc8a4fab14e085507ff31", 0x80}], 0x7}, 0x0, 0x20000004, 0x1, {0x0, r4}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:06 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:06 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf21}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r0}, 0x48) fcntl$dupfd(r0, 0x0, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x1, 0xbf22}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r2}, 0x48) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="8510000003800000"], &(0x7f0000000540)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x4, 0xffffffa0, 0x6ebd}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff, r3]}, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf21}, 0x48) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) fcntl$dupfd(r4, 0x0, r5) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x4}, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r6 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x0, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r6, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:06 executing program 0: r0 = syz_io_uring_setup(0x570, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:06 executing program 0: r0 = syz_io_uring_setup(0x570, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:06 executing program 0: r0 = syz_io_uring_setup(0x570, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:06 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0xd8, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f787a19296ba3800b84907da3b950fad1c3baf45a4cfb3a1c"}], 0xd8}, 0x40) 01:40:06 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0), 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x38, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3c07b4d120b3994d67b"}, {0xd8, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f787a19296ba3800b84907da3b950fad1c3baf45a4cfb3a1c"}], 0x110}, 0x40) 01:40:06 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:06 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 1021.549619][T27116] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1021.551196][T27116] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 1021.557686][T27117] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 01:40:06 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r2 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r2, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:06 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:06 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r2 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r2, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:07 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r2 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r2, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:07 executing program 3: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:07 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r2 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r2, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:07 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:07 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r2 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r2, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:07 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0xd8, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f787a19296ba3800b84907da3b950fad1c3baf45a4cfb3a1c"}], 0xd8}, 0x40) 01:40:07 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0), 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x38, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3c07b4d120b3994d67b"}, {0xd8, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f787a19296ba3800b84907da3b950fad1c3baf45a4cfb3a1c"}], 0x110}, 0x40) 01:40:07 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r2, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:07 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:07 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r2 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r2, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 1022.483464][T27150] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1022.485203][T27150] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 01:40:07 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0xffffffff, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x48) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000380)={'#! ', './file0', [], 0xa, "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"}, 0x805) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000bc0), 0x329100, 0x0) r3 = syz_open_procfs$userns(0x0, &(0x7f00000014c0)) dup(r3) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r5, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x805) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x6, &(0x7f0000000180)=@raw=[@map_idx={0x18, 0x2, 0x5, 0x0, 0xe}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80d1}], &(0x7f0000000240)='syzkaller\x00', 0xff, 0x0, 0x0, 0x41000, 0x1d, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x9, 0x7, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[r4, r0, r5, r0, r0]}, 0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r6 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r9, &(0x7f0000000000), 0x10) io_uring_enter(r6, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 1022.489494][T27151] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 01:40:07 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:07 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r2, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:07 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r2, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:08 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:08 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:08 executing program 3: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:08 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0xd8, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f787a19296ba3800b84907da3b950fad1c3baf45a4cfb3a1c"}], 0xd8}, 0x40) 01:40:08 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r5, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:08 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:08 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 1023.442000][T27181] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1023.443082][T27181] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 01:40:08 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:08 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:08 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:09 executing program 3: ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:09 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:09 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:09 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:09 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x38, 0x0, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3c07b4d120b3994d67b"}, {0xd8, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f787a19296ba3800b84907da3b950fad1c3baf45a4cfb3a1c"}], 0x110}, 0x40) 01:40:09 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 1024.341167][T27205] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1024.342423][T27205] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 01:40:09 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r5, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:09 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r5, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:09 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:09 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:10 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:10 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:10 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:10 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x38, 0x0, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3c07b4d120b3994d67b"}, {0xd8, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f787a19296ba3800b84907da3b950fad1c3baf45a4cfb3a1c"}], 0x110}, 0x40) [ 1025.233976][T27229] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1025.237204][T27229] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 01:40:10 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x141101) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:10 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:10 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:11 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:11 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r5, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:11 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r5, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:11 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:11 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:11 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x38, 0x0, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3c07b4d120b3994d67b"}, {0xd8, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f787a19296ba3800b84907da3b950fad1c3baf45a4cfb3a1c"}], 0x110}, 0x40) [ 1026.353052][T27251] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1026.353884][T27251] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 01:40:11 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:11 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:11 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:12 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:12 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:12 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:12 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x10, 0x10a}, {0xd8, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f787a19296ba3800b84907da3b950fad1c3baf45a4cfb3a1c"}], 0xe8}, 0x40) [ 1027.261950][T27273] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1027.278097][T27273] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 01:40:12 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:12 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r5, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:12 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:12 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:12 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:13 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:13 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x10, 0x10a}, {0xd8, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f787a19296ba3800b84907da3b950fad1c3baf45a4cfb3a1c"}], 0xe8}, 0x40) 01:40:13 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:13 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 1028.205788][T27293] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1028.206723][T27293] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 01:40:13 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:13 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r2 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r2, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:13 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:13 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:14 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x10, 0x10a}, {0xd8, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f787a19296ba3800b84907da3b950fad1c3baf45a4cfb3a1c"}], 0xe8}, 0x40) 01:40:14 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:14 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r2 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r2, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:14 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:14 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x10, 0x10a}, {0xd8, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f787a19296ba3800b84907da3b950fad1c3baf45a4cfb3a1c"}], 0xe8}, 0x40) 01:40:14 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140), 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:14 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r2 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r2, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 1029.086320][T27317] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 01:40:14 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140), 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 1029.097826][T27317] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 1029.203310][T27320] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1029.221056][T27320] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 01:40:14 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140), 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:14 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:14 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:14 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:15 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:15 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:15 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:15 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:15 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x28, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947"}, {0xd8, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f787a19296ba3800b84907da3b950fad1c3baf45a4cfb3a1c"}], 0x100}, 0x40) [ 1030.064870][T27341] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 01:40:15 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 1030.065780][T27341] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 01:40:15 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:15 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) connect$vsock_stream(r5, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:15 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:15 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, 0x0, 0x0) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:15 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:15 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:16 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x28, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947"}, {0xd8, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f787a19296ba3800b84907da3b950fad1c3baf45a4cfb3a1c"}], 0x100}, 0x40) 01:40:16 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 1031.154393][T27363] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1031.156140][T27363] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 01:40:16 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:16 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, 0x0, 0x0) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:16 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:16 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) connect$vsock_stream(r5, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:16 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:16 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:16 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, 0x0, 0x0) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:17 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x28, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947"}, {0xd8, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f787a19296ba3800b84907da3b950fad1c3baf45a4cfb3a1c"}], 0x100}, 0x40) 01:40:17 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 1032.055003][T27382] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1032.055866][T27382] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 01:40:17 executing program 2: syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r2, &(0x7f0000000000), 0x10) io_uring_enter(0xffffffffffffffff, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:17 executing program 2: syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r2, &(0x7f0000000000), 0x10) io_uring_enter(0xffffffffffffffff, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:17 executing program 2: syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r2, &(0x7f0000000000), 0x10) io_uring_enter(0xffffffffffffffff, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:17 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:17 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) connect$vsock_stream(r5, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:17 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:17 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:17 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:18 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x30, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3"}, {0xd8, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f787a19296ba3800b84907da3b950fad1c3baf45a4cfb3a1c"}], 0x108}, 0x40) 01:40:18 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:18 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000) [ 1032.956567][T27406] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1032.986087][T27406] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 01:40:18 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:18 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:18 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:18 executing program 2: syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r2, &(0x7f0000000000), 0x10) io_uring_enter(0xffffffffffffffff, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:18 executing program 3: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:18 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:18 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:18 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:18 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:18 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x30, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3"}, {0xd8, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f787a19296ba3800b84907da3b950fad1c3baf45a4cfb3a1c"}], 0x108}, 0x40) 01:40:18 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:19 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 1033.831722][T27432] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1033.852170][T27432] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 01:40:19 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x28, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947"}, {0xd8, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f787a19296ba3800b84907da3b950fad1c3baf45a4cfb3a1c"}], 0x100}, 0x40) 01:40:19 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:19 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 1034.143960][T27443] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 01:40:19 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 1034.161543][T27443] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:40:19 executing program 3: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:19 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:19 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140), 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:19 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:19 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x30, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3"}, {0xd8, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f787a19296ba3800b84907da3b950fad1c3baf45a4cfb3a1c"}], 0x108}, 0x40) 01:40:19 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140), 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:19 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r2 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r2, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:20 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140), 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 1034.819933][T27460] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1034.820867][T27460] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 01:40:20 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:20 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:20 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r2 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r2, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:20 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:20 executing program 3: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140), 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:20 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r2 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r2, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:20 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r2 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r2, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:20 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:20 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x38, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3c07b4d120b"}, {0xd8, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f787a19296ba3800b84907da3b950fad1c3baf45a4cfb3a1c"}], 0x110}, 0x40) 01:40:20 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 1035.709067][T27480] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1035.710611][T27480] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 01:40:21 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x10, 0x10a}, {0xd8, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f787a19296ba3800b84907da3b950fad1c3baf45a4cfb3a1c"}], 0xe8}, 0x40) 01:40:21 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:21 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:21 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, 0x0, 0x0) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 1036.053693][T27490] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1036.096031][T27490] netlink: 'syz-executor.3': attribute type 4 has an invalid length. 01:40:21 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:21 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, 0x0, 0x0) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:21 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x38, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3c07b4d120b"}, {0xd8, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f787a19296ba3800b84907da3b950fad1c3baf45a4cfb3a1c"}], 0x110}, 0x40) 01:40:21 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 1036.650838][T27501] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 01:40:21 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:21 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, 0x0, 0x0) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 1036.651843][T27501] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 01:40:22 executing program 3: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r2 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r2, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:22 executing program 3: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:22 executing program 1: syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r2 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r2, &(0x7f0000000000), 0x10) io_uring_enter(0xffffffffffffffff, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:22 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:22 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:22 executing program 1: syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r2 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r2, &(0x7f0000000000), 0x10) io_uring_enter(0xffffffffffffffff, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:22 executing program 3: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:22 executing program 1: syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r2 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r2, &(0x7f0000000000), 0x10) io_uring_enter(0xffffffffffffffff, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:22 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x38, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3c07b4d120b"}, {0xd8, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f787a19296ba3800b84907da3b950fad1c3baf45a4cfb3a1c"}], 0x110}, 0x40) 01:40:22 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:22 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 1037.562360][T27527] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1037.563639][T27527] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 01:40:22 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:23 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:23 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:23 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:23 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:23 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x38, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3c07b4d120b3994"}, {0xd8, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f787a19296ba3800b84907da3b950fad1c3baf45a4cfb3a1c"}], 0x110}, 0x40) 01:40:23 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:23 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf21}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r0}, 0x48) fcntl$dupfd(r0, 0x0, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x1, 0xbf22}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r2}, 0x48) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="8510000003800000"], &(0x7f0000000540)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x4, 0xffffffa0, 0x6ebd}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff, r3]}, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf21}, 0x48) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) fcntl$dupfd(r4, 0x0, r5) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x4}, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r6 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r6, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:23 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:23 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:23 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 1038.550205][T27556] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1038.551540][T27556] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 01:40:24 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:24 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x38, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3c07b4d120b3994"}, {0xd8, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f787a19296ba3800b84907da3b950fad1c3baf45a4cfb3a1c"}], 0x110}, 0x40) 01:40:24 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:24 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r5, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:24 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:24 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:24 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 1039.564764][T27570] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1039.589923][T27570] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 01:40:24 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:24 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf21}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r0}, 0x48) fcntl$dupfd(r0, 0x0, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x1, 0xbf22}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r2}, 0x48) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="8510000003800000"], &(0x7f0000000540)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x4, 0xffffffa0, 0x6ebd}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff, r3]}, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf21}, 0x48) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) fcntl$dupfd(r4, 0x0, r5) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x4}, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r6 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r6, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:25 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:25 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:25 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:25 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf21}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r0}, 0x48) fcntl$dupfd(r0, 0x0, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x1, 0xbf22}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r2}, 0x48) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="8510000003800000"], &(0x7f0000000540)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x4, 0xffffffa0, 0x6ebd}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff, r3]}, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf21}, 0x48) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) fcntl$dupfd(r4, 0x0, r5) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x4}, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r6 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r6, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:25 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x38, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3c07b4d120b3994"}, {0xd8, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f787a19296ba3800b84907da3b950fad1c3baf45a4cfb3a1c"}], 0x110}, 0x40) 01:40:25 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 1040.457938][T27595] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1040.459124][T27595] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 01:40:25 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r5, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:25 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x38, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3c07b4d120b3994"}, {0xd8, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f787a19296ba3800b84907da3b950fad1c3baf45a4cfb3a1c"}], 0x110}, 0x40) 01:40:25 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:25 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 1040.757998][T27604] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1040.759131][T27604] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 01:40:26 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:26 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf21}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r0}, 0x48) fcntl$dupfd(r0, 0x0, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x1, 0xbf22}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r2}, 0x48) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="8510000003800000"], &(0x7f0000000540)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x4, 0xffffffa0, 0x6ebd}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff, r3]}, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf21}, 0x48) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) fcntl$dupfd(r4, 0x0, r5) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x4}, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r6 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r6, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:26 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140), 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:26 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140), 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:26 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x38, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3c07b4d120b3994d6"}, {0xd8, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f787a19296ba3800b84907da3b950fad1c3baf45a4cfb3a1c"}], 0x110}, 0x40) [ 1041.380727][T27621] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1041.381717][T27621] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 01:40:26 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf21}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r0}, 0x48) fcntl$dupfd(r0, 0x0, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x1, 0xbf22}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r2}, 0x48) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="8510000003800000"], &(0x7f0000000540)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x4, 0xffffffa0, 0x6ebd}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff, r3]}, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf21}, 0x48) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) fcntl$dupfd(r4, 0x0, r5) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x4}, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r6 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r6, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:26 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140), 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:26 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x38, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3c07b4d120b3994"}, {0xd8, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f787a19296ba3800b84907da3b950fad1c3baf45a4cfb3a1c"}], 0x110}, 0x40) [ 1041.639705][T27628] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1041.642940][T27628] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 01:40:26 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:26 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r5, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:27 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:27 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf21}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r0}, 0x48) fcntl$dupfd(r0, 0x0, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x1, 0xbf22}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r2}, 0x48) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="8510000003800000"], &(0x7f0000000540)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x4, 0xffffffa0, 0x6ebd}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff, r3]}, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf21}, 0x48) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) fcntl$dupfd(r4, 0x0, r5) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x4}, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r6 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r6, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:27 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x38, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3c07b4d120b3994d6"}, {0xd8, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f787a19296ba3800b84907da3b950fad1c3baf45a4cfb3a1c"}], 0x110}, 0x40) [ 1042.278141][T27641] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1042.282145][T27641] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 01:40:27 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:27 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf21}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r0}, 0x48) fcntl$dupfd(r0, 0x0, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x1, 0xbf22}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r2}, 0x48) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="8510000003800000"], &(0x7f0000000540)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x4, 0xffffffa0, 0x6ebd}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff, r3]}, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf21}, 0x48) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) fcntl$dupfd(r4, 0x0, r5) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x4}, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r6 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r6, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:27 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r3) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:27 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r5, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:28 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, 0x0, 0x0) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:28 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x38, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3c07b4d120b3994d6"}, {0xd8, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f787a19296ba3800b84907da3b950fad1c3baf45a4cfb3a1c"}], 0x110}, 0x40) [ 1043.191539][T27657] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1043.193303][T27657] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 01:40:28 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, 0x0, 0x0) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:28 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r3) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:28 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r3) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:28 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, 0x0, 0x0) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:29 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r5 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000340)={{{@in=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@remote}}, &(0x7f0000000440)=0xe8) recvmsg(r1, &(0x7f0000001f80)={&(0x7f0000001bc0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001c40)=""/232, 0xe8}, {&(0x7f0000001d40)=""/247, 0xf7}], 0x2, &(0x7f0000001e80)=""/238, 0xee}, 0x40002120) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240), 0x24020, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB="2c7065726d69745f64697265ff0100000000000068207375626a5f726f232b9bb0976c653d30dd6864a8306c40303030303030301830303031382c6d61736b3d4d41595f57", @ANYRESDEC=r6, @ANYBLOB=',fsname=\x00,\x00']) r7 = socket$vsock_stream(0x28, 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000001600)="b271c8f4d5294c4cde6f8c3ae006d75a5f8b77907722c290a1ee60994437f3bc8187ef1d0a29283f336c45c30b8510c32d654e1b71af313d1c45d707cb9235ff574938788ccdc5fecd21611d976aa502f07511b286ebf114bc9d252f8db26aa0ce1bf1d64580b03117edcc936ae19553d1743a6f8e2f596385af43f63305d91ad6b7a160c38dc1d9989d5dbf4d5392bcc9581c0061a6dec54f2e37655bc8af6350c73ad09d524b8c1682959050b638ab35fafede7c49b396e8e6fd2423b6165df06b563264fb13b1edb7c4", 0xcb}, {&(0x7f0000001700)="ed625ba30396f106c069f6a3fe99a2537eb8f27fa9fe4846992c13d68eb3beb19037675a7130aa6c2fc0e980fa8f13ca41cac9a33aa88b6359aeea71736974f897ce582b293dd6d50c657844cc5ac8b2d296652e5d4acf5cee362004547ef936c8814d8bb1ad6b66638cb12be8c15be606c19e21586c15a6516508a9377c4d10962e4a5f0d65b582da2cd91e1dd5df7e2f3db159d03e5cb8d007fddb234e0147e9c3f99c16ca0355a1d4baa2fc3ac0a16f10dab27a0b449d56fab281f1714637a045b27b076bc42b2b", 0xc9}, {&(0x7f0000001800)="c559af6dd6670771c0caeee9d324869521ed0b3c6136c3bc765edcca777bc37b48be23c40607642c238e7bbe20215417724f8f0e0c2b52399d594db9e9ca486ff84a0e7d8a3ae727b0953ef7d12ef56ddbd4ce2e5631060ef8fa37108016d2f5a92b85ca6ba7d1a534c76e95ec5820dc551a0a31a4d243136e18b0d380ae61710fb231ed6ac4ed4f2ebf1f1b7b52694cb6d55a02f78ce2967a1625998551e7c0bb54f275bb64d606c1f70e3a5cd40fdc8a28b0a31f2f84b38f93310710605d918d7cd17ddc48a01254e38e01cfb89b6658fddcb6d88fc829e948611e4871f55d746886f4036b4ae8", 0xe8}, {&(0x7f0000001900)="2c95d440006508bfd0649c7529cdebba76db733f8989bd047c36f78eeaf394388a29f8215f065cc4546fc6dd182347b5e0fd8fc2abc4afa076dc3052b493bbdf8cfc8f69900eb3a0b917d87b9f9bb1bed421a6d0980ea6556828e3e2f39a60e70f938167a52e459ea03953930328123c1dbd205c2dd3369c7e91a6f840de954d829c96996785f9e1be76a1a1d084b111222cd43e1e0078d1218f943e9946d214c4856d6626e8727b1f4fc667f1e51fc6df8572f567e55929d9bae90c8c95c25cbec6992875747a0583ad23bf48376b643dfa4655096c9ef2f26ee8d2bf5b1bf78bb6fbd2d0fa0274684b3573c9502bb89a6747", 0xf3}, {&(0x7f0000000480)="20b0ae4d3ebd2574b9a4505568764adb6d9f4e7651f6fc95258856b8460029c1c0efc69203bece96e2910cdce41c7706d6ce9aab80579c50a91613b603163f35e6dbf3912120ad5780ff85e7fa6ae5f9c6f68939d6cc697f97118061b63166cbcf540fcaf28bf6aae04f14ced427c10955ddf6adda5eea5f5f8b121091692dffdeb3740840c553cd17fb0f4243b57d1bde73feb554626e9fbb60c4fe5f12e226a9bee8c5dbcdc55fff6f314380ecb16e8f87de4ce1cedbf2948cfd8ecddc5f70", 0xc0}, {&(0x7f0000001a00)="5a37ed1787", 0x5}, {&(0x7f0000001a40)="0d7be0d03cb4877f0ac0f70486ccd2ddd5988ed1a0fa44702a7fc8f30fa60050961b22aa2476cf97c4b1fc41d70cee7739176ce2822cefdf2c3984a1896f4634edd093b33d1b22a73b2fd5373c9a5229a23c29319ecee35ab34d58b7f4a45fe42bc7238b5172640ef517b64e62c7eaa26c3976a9f3d853aae24b93ac7fdeaae5cb516a6f3d119cb3825a4b0af5b89f48f7dc58df4e7fba", 0x97}], 0x8) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000001b80)=[{r0}], 0x1, 0x3) connect$vsock_stream(r7, &(0x7f0000000000), 0x10) io_uring_enter(r2, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:29 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x38, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3c07b4d120b3994d67b"}, {0xd8, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f787a19296ba3800b84907da3b950fad1c3baf45a4cfb3a1c"}], 0x110}, 0x0) 01:40:29 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf21}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r0}, 0x48) fcntl$dupfd(r0, 0x0, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x1, 0xbf22}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r2}, 0x48) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="8510000003800000"], &(0x7f0000000540)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x4, 0xffffffa0, 0x6ebd}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff, r3]}, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf21}, 0x48) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) fcntl$dupfd(r4, 0x0, r5) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x4}, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r6 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0xff, 0xfffffc01, 0x1ff, 0x420, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5, 0xe}, 0x48) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r6, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:29 executing program 0: syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r2 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r2, &(0x7f0000000000), 0x10) io_uring_enter(0xffffffffffffffff, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 1044.145919][T27672] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1044.146827][T27672] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 01:40:29 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r3) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:29 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r3) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:29 executing program 0: syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r2 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r2, &(0x7f0000000000), 0x10) io_uring_enter(0xffffffffffffffff, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:29 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r5 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000340)={{{@in=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@remote}}, &(0x7f0000000440)=0xe8) recvmsg(r1, &(0x7f0000001f80)={&(0x7f0000001bc0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001c40)=""/232, 0xe8}, {&(0x7f0000001d40)=""/247, 0xf7}], 0x2, &(0x7f0000001e80)=""/238, 0xee}, 0x40002120) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240), 0x24020, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB="2c7065726d69745f64697265ff0100000000000068207375626a5f726f232b9bb0976c653d30dd6864a8306c40303030303030301830303031382c6d61736b3d4d41595f57", @ANYRESDEC=r6, @ANYBLOB=',fsname=\x00,\x00']) r7 = socket$vsock_stream(0x28, 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000001600)="b271c8f4d5294c4cde6f8c3ae006d75a5f8b77907722c290a1ee60994437f3bc8187ef1d0a29283f336c45c30b8510c32d654e1b71af313d1c45d707cb9235ff574938788ccdc5fecd21611d976aa502f07511b286ebf114bc9d252f8db26aa0ce1bf1d64580b03117edcc936ae19553d1743a6f8e2f596385af43f63305d91ad6b7a160c38dc1d9989d5dbf4d5392bcc9581c0061a6dec54f2e37655bc8af6350c73ad09d524b8c1682959050b638ab35fafede7c49b396e8e6fd2423b6165df06b563264fb13b1edb7c4", 0xcb}, {&(0x7f0000001700)="ed625ba30396f106c069f6a3fe99a2537eb8f27fa9fe4846992c13d68eb3beb19037675a7130aa6c2fc0e980fa8f13ca41cac9a33aa88b6359aeea71736974f897ce582b293dd6d50c657844cc5ac8b2d296652e5d4acf5cee362004547ef936c8814d8bb1ad6b66638cb12be8c15be606c19e21586c15a6516508a9377c4d10962e4a5f0d65b582da2cd91e1dd5df7e2f3db159d03e5cb8d007fddb234e0147e9c3f99c16ca0355a1d4baa2fc3ac0a16f10dab27a0b449d56fab281f1714637a045b27b076bc42b2b", 0xc9}, {&(0x7f0000001800)="c559af6dd6670771c0caeee9d324869521ed0b3c6136c3bc765edcca777bc37b48be23c40607642c238e7bbe20215417724f8f0e0c2b52399d594db9e9ca486ff84a0e7d8a3ae727b0953ef7d12ef56ddbd4ce2e5631060ef8fa37108016d2f5a92b85ca6ba7d1a534c76e95ec5820dc551a0a31a4d243136e18b0d380ae61710fb231ed6ac4ed4f2ebf1f1b7b52694cb6d55a02f78ce2967a1625998551e7c0bb54f275bb64d606c1f70e3a5cd40fdc8a28b0a31f2f84b38f93310710605d918d7cd17ddc48a01254e38e01cfb89b6658fddcb6d88fc829e948611e4871f55d746886f4036b4ae8", 0xe8}, {&(0x7f0000001900)="2c95d440006508bfd0649c7529cdebba76db733f8989bd047c36f78eeaf394388a29f8215f065cc4546fc6dd182347b5e0fd8fc2abc4afa076dc3052b493bbdf8cfc8f69900eb3a0b917d87b9f9bb1bed421a6d0980ea6556828e3e2f39a60e70f938167a52e459ea03953930328123c1dbd205c2dd3369c7e91a6f840de954d829c96996785f9e1be76a1a1d084b111222cd43e1e0078d1218f943e9946d214c4856d6626e8727b1f4fc667f1e51fc6df8572f567e55929d9bae90c8c95c25cbec6992875747a0583ad23bf48376b643dfa4655096c9ef2f26ee8d2bf5b1bf78bb6fbd2d0fa0274684b3573c9502bb89a6747", 0xf3}, {&(0x7f0000000480)="20b0ae4d3ebd2574b9a4505568764adb6d9f4e7651f6fc95258856b8460029c1c0efc69203bece96e2910cdce41c7706d6ce9aab80579c50a91613b603163f35e6dbf3912120ad5780ff85e7fa6ae5f9c6f68939d6cc697f97118061b63166cbcf540fcaf28bf6aae04f14ced427c10955ddf6adda5eea5f5f8b121091692dffdeb3740840c553cd17fb0f4243b57d1bde73feb554626e9fbb60c4fe5f12e226a9bee8c5dbcdc55fff6f314380ecb16e8f87de4ce1cedbf2948cfd8ecddc5f70", 0xc0}, {&(0x7f0000001a00)="5a37ed1787", 0x5}, {&(0x7f0000001a40)="0d7be0d03cb4877f0ac0f70486ccd2ddd5988ed1a0fa44702a7fc8f30fa60050961b22aa2476cf97c4b1fc41d70cee7739176ce2822cefdf2c3984a1896f4634edd093b33d1b22a73b2fd5373c9a5229a23c29319ecee35ab34d58b7f4a45fe42bc7238b5172640ef517b64e62c7eaa26c3976a9f3d853aae24b93ac7fdeaae5cb516a6f3d119cb3825a4b0af5b89f48f7dc58df4e7fba", 0x97}], 0x8) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000001b80)=[{r0}], 0x1, 0x3) connect$vsock_stream(r7, &(0x7f0000000000), 0x10) io_uring_enter(r2, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:29 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:30 executing program 0: syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r2 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r2, &(0x7f0000000000), 0x10) io_uring_enter(0xffffffffffffffff, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:30 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:30 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x38, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3c07b4d120b3994d67b"}, {0xd8, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f787a19296ba3800b84907da3b950fad1c3baf45a4cfb3a1c"}], 0x110}, 0x0) 01:40:30 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x38, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3c07b4d120b3994d67b"}, {0xd8, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f787a19296ba3800b84907da3b950fad1c3baf45a4cfb3a1c"}], 0x110}, 0x0) [ 1045.075972][T27696] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1045.076970][T27696] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 01:40:30 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000) [ 1045.277778][T27701] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1045.282274][T27701] netlink: 'syz-executor.3': attribute type 4 has an invalid length. 01:40:30 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:30 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:30 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:30 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:30 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000007c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000840)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="0300000000000000000000000000000047c4b90e36d0c2a12c3a567d9317bd9188a092912bfdece8c6b9d21808e57c23265a9e1e603e190ac38338055ad865281d991939513c1893ab3fdfd84445d7c5677e5b8f4fca90823a643d0dec4f2b79e59ed6b48ebdc4f78a40712896"]) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x7, 0x4, 0x408, 0x220, 0x0, 0x220, 0x320, 0x320, 0x320, 0x4, &(0x7f0000000240), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x24}, 0x4, 0xffffffff}}}, {{@arp={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffff00, 0x9, 0x1, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x3, 0xff, 0x3, 0x80, 0xe908, 0x9, 'wg0\x00', 'ip6tnl0\x00', {}, {}, 0x0, 0x101}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @local, @private=0xa010101, 0x1, 0xffffffff}}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "77c4130ca4170e41096275ac3b5481f47e45cd4c859d4673d9e9e40715de"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x458) r3 = syz_io_uring_setup(0xb86, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x3ab}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r6, &(0x7f0000000000), 0x10) io_uring_enter(r3, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:30 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf21}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r0}, 0x48) fcntl$dupfd(r0, 0x0, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x1, 0xbf22}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r2}, 0x48) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="8510000003800000"], &(0x7f0000000540)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x4, 0xffffffa0, 0x6ebd}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff, r3]}, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf21}, 0x48) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) fcntl$dupfd(r4, 0x0, r5) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x4}, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r6 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0xff, 0xfffffc01, 0x1ff, 0x420, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5, 0xe}, 0x48) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r6, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:31 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x38, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3c07b4d120b3994d67b"}, {0xd8, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f787a19296ba3800b84907da3b950fad1c3baf45a4cfb3a1c"}], 0x110}, 0x0) 01:40:31 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:31 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 1045.977864][ T3688] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1045.985409][T27719] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 01:40:31 executing program 3: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000100)=""/9, 0x9}], 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 1045.988303][T27719] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 01:40:31 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = dup(0xffffffffffffffff) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 1046.499982][ T3688] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1046.500013][ T3688] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 01:40:31 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x38, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3c07b4d120b3994d67b"}, {0xd8, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f787a19296ba3800b84907da3b950fad1c3baf45a4cfb3a1c"}], 0x110}, 0x40) [ 1046.500033][ T3688] usb 1-1: Product: syz [ 1046.500046][ T3688] usb 1-1: Manufacturer: syz [ 1046.500059][ T3688] usb 1-1: SerialNumber: syz 01:40:31 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r3) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:31 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r3) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 1046.557802][ T3688] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 01:40:32 executing program 4: r0 = socket(0x29, 0x2, 0x0) ioctl$SIOCRSGCAUSE(r0, 0x89e2, 0xfffffffffffffffe) syz_genetlink_get_family_id$tipc(&(0x7f0000000740), r0) r1 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000180)='./file0\x00', 0x1, 0x5, &(0x7f0000000580)=[{&(0x7f0000000240)="fbf3832a92845c9f434e60ed8787d0", 0xf, 0x1}, {&(0x7f0000000340)="38ec96b8cca9ae49874ebc5f8316184e3429e605cdc39d9b238cc718672b430a757c314894793646c676d400ffa548217c66639832f0ba77f937e796dd6116e5c1278b85bccbb4085e7c473547f06a5472202c9b2d8e8e2313f5ec0bfb3ce56ee1fc5647ab0d7bf78928d068ca15c09fae8593b86742df6b3794798ca8023213cbe5dbee5bc36cb01ea360f7eef7b6", 0x8f, 0x2}, {&(0x7f0000000400)="4d28ccd8c50d206be6a0dd7d0e67981124d46f3b606bdc554c03b9fce64c1c83c7b92a9dd6c2d6da97af4de09f0a1ccd29cbde706f5a129239ca62923a7df07bdde85e1077a66ee14a1836327311f07675b88865909e1efa0c3ef30a31", 0x5d, 0x8}, {&(0x7f0000000480)="1e54f2d9b97309c45f195379eda2f9c91e11c7016cc376a788bc47c9471744b1f36dc918897f283b1a725aad03cdcfa84268ef7f2997c293070980267dbd195924633cd3eb190f8e9ae0b157b04fe702439034e1593d8b57624568715c0e6230a2f986fe8a7fbbaf39c746a2cc64ee2829dd090d196170dd1d1c5992b653d6dbbf06c62765c20dfe7126da54a2f205bdad28ebbe0435422f641c69cf3f665c2e97b431ab23093f8e38e85e7dca4d00b1e9059d86e7ec012b1cd5577c3857357d899eed17644457be9ee1942016de2ac93fda56439f0b", 0xd6, 0x5}, {&(0x7f0000000280)="43b260", 0x3, 0x81}], 0x101040, &(0x7f0000000600)={[{@lastblock={'lastblock', 0x3d, 0x8}}, {@rootdir={'rootdir', 0x3d, 0x5}}, {@shortad}, {@dmode={'dmode', 0x3d, 0x8}}, {@lastblock={'lastblock', 0x3d, 0x1}}, {@adinicb}, {@uid_ignore}, {@mode={'mode', 0x3d, 0x7fffffff}}, {@utf8}], [{@uid_gt={'uid>', 0xee01}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@seclabel}, {@audit}, {@appraise}, {@obj_type={'obj_type', 0x3d, '\x00'}}, {@pcr}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}) io_uring_enter(r1, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 1046.765481][T27733] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1046.777542][T27733] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 01:40:32 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = dup(0xffffffffffffffff) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 1047.127556][ T3688] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1047.645303][ T3685] usb 1-1: USB disconnect, device number 107 01:40:33 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:33 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r3) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:33 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r3) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:33 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r3) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:33 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = dup(0xffffffffffffffff) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:33 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf21}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r0}, 0x48) fcntl$dupfd(r0, 0x0, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x1, 0xbf22}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r2}, 0x48) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="8510000003800000"], &(0x7f0000000540)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x4, 0xffffffa0, 0x6ebd}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff, r3]}, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf21}, 0x48) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) fcntl$dupfd(r4, 0x0, r5) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x4}, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r6 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r7, r8, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0xff, 0xfffffc01, 0x1ff, 0x420, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5, 0xe}, 0x48) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r6, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 1048.177149][ T3688] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1048.177269][ T3688] ath9k_htc: Failed to initialize the device [ 1048.177758][ T3685] usb 1-1: ath9k_htc: USB layer deinitialized 01:40:33 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r5, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:34 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r3) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:34 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r5, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:34 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r5, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:34 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r3) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:34 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:34 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r5, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:34 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf21}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r0}, 0x48) fcntl$dupfd(r0, 0x0, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x1, 0xbf22}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r2}, 0x48) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="8510000003800000"], &(0x7f0000000540)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x4, 0xffffffa0, 0x6ebd}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff, r3]}, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf21}, 0x48) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) fcntl$dupfd(r4, 0x0, r5) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x4}, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r6 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) r8 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r7, 0x0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0xff, 0xfffffc01, 0x1ff, 0x420, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5, 0xe}, 0x48) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r6, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:35 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r5, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:35 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r5, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:35 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r5, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:35 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x8}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f00000003c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = syz_io_uring_setup(0x43ef, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000040)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x0, {}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x1) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0xa7f5af8182989f0e, 0x0, 0x0, 0x1, {0x0, r8}}, 0x20) 01:40:35 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r5, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:36 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r5, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:36 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r5, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:36 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x1}, 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:36 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r5, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:36 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r5, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:36 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r2, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:36 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r1, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wg2\x00', 0x0}) r6 = open(&(0x7f0000000380)='./file0\x00', 0x400100, 0xa4) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0x80000000, 0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000480)={{0x1, 0x1, 0x18, r4, {0x2}}, './file0\x00'}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r11 = accept4(r10, 0x0, 0x0, 0x0) r12 = accept4$alg(r11, 0x0, 0x0, 0x0) splice(r9, 0x0, r12, 0x0, 0x200000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x9, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x100}, [@exit]}, &(0x7f0000000240)='syzkaller\x00', 0x419, 0x25, &(0x7f0000000280)=""/37, 0x0, 0x12, '\x00', r5, 0x0, r6, 0x8, &(0x7f00000003c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0xa, 0x3, 0x4f}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[r7, r8, r9]}, 0x80) 01:40:37 executing program 1: ioctl$VIDIOC_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000340)={0x2, 0x0, '\x00', {0x0, @reserved}}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) sendmsg(r1, &(0x7f0000000580)={&(0x7f0000000240)=@qipcrtr={0x2a, 0x0, 0xffff0000}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000400)="63648e047f4e923e3b6019b5f04a620aaf60f68c3ed898e9290674b606b736afd68f24e88fbbd708b29227ab0e29047bfc340e2af723", 0x36}], 0x1, &(0x7f0000000480)=[{0xc8, 0x111, 0x4, "f8c62e034595a85a8c65f567aef47609411aa150c0ed02d4ca55f18c565355e63436cd968dd68a7e96e24de5c0c897498a83cb87cd77f21461803f351272435cf2ac26e2be0b87e6dab5c4891a3a7ae81117ab0b23ef648f68d462945ba73fa20c35185bfa31bf258aaa094fd27f1f2fea5a4d0525c7b4a5a071108f2a5c831c34ceb6f71af6c08e163b4d4e52d6a8bf33d4cbedc63b51bfb37e3f3eba06e97010e7f3940206e09e2702277bb8e9cb94dcfdfe4adbed783b"}], 0xc8}, 0x4804) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r5, &(0x7f0000000000), 0x10) io_uring_enter(r2, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:37 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r2 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r2, &(0x7f0000000000), 0x10) io_uring_enter(0xffffffffffffffff, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:37 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:37 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r5, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r6 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) connect$vsock_stream(r6, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:38 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:38 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r5, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:38 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r2 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r2, &(0x7f0000000000), 0x10) io_uring_enter(0xffffffffffffffff, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:38 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = accept$netrom(r0, &(0x7f0000000240)={{0x3, @default}, [@default, @bcast, @null, @bcast, @null, @default, @rose]}, &(0x7f0000000180)=0x48) syz_io_uring_setup(0x43ef, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000040)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x0, {}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd=r5, 0x7, 0x0, 0xffffffff, 0x0, 0x0, {0x0, r8}}, 0xc8) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r1, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:38 executing program 0: r0 = socket(0x29, 0x2, 0x0) ioctl$SIOCRSGCAUSE(r0, 0x89e2, 0xfffffffffffffffe) sendfile(0xffffffffffffffff, r0, &(0x7f0000000100)=0x100000000, 0x3) r1 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) bind(r0, &(0x7f0000000240)=@ax25={{0x3, @bcast, 0x4}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x80) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r1, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:39 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) r4 = socket(0x29, 0x2, 0x0) ioctl$SIOCRSGCAUSE(r4, 0x89e2, 0xfffffffffffffffe) ioctl(r4, 0x3, &(0x7f0000000340)="7f0852047d63c8cf5e3dfbdae28b19987d93a8d84a9faf1eb7eb77bbd24c7bb30494f12248362deabfb689c60270c85bd9d7b7d83732381686cbe769d20fa6da811ca2ac8c10dbbb4ac43040a45bb87fe40f46b484aaa90c585a583d26f1a29b860adb16dcc8ef9558209db556bcd2daaa508931ddff060013463f2d71d38baafaa3a40abc662be50cd798b67c5784cadb889d33952bd3db") syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) r5 = socket(0x29, 0x2, 0x0) ioctl$SIOCRSGCAUSE(r5, 0x89e2, 0xfffffffffffffffe) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000400)="ee40513b04c3ff70e7283d9aa9042a44c70af2a963040a2640b7fa3c71450c4332ecbec97abd32d52e21a0fd0ad99cc95446fd99b54f0ad0379a16f8e6ee56bb570337842cdfcddfaaf5df6a3871917ed53d80d1c4528e533c46a7b35631027031d4ffab1a1905a0b0c5bbf919b3ac88725530cb3266237d07ecd9242093de6db2bf3e", 0x83, r5}, 0x68) r6 = socket(0x29, 0x2, 0x0) ioctl$SIOCRSGCAUSE(r6, 0x89e2, 0xfffffffffffffffe) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r6, 0xc0096616, &(0x7f0000000180)={0x4, [0x0, 0x0, 0x0, 0x0]}) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 1054.180146][ T1220] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.180193][ T1220] ieee802154 phy1 wpan1: encryption failed: -22 01:40:39 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r2 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r2, &(0x7f0000000000), 0x10) io_uring_enter(0xffffffffffffffff, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:39 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf21}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r0}, 0x48) fcntl$dupfd(r0, 0x0, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x1, 0xbf22}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r2}, 0x48) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="8510000003800000"], &(0x7f0000000540)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x4, 0xffffffa0, 0x6ebd}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff, r3]}, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf21}, 0x48) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) fcntl$dupfd(r4, 0x0, r5) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x4}, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r6 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000000c0)=0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0xff, 0xfffffc01, 0x1ff, 0x420, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5, 0xe}, 0x48) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r6, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:39 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) dup(0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:39 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r6 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:39 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:40 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r5, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:40 executing program 5: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r5, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:40 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:40 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:41 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x2010, r0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000180)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x2007, @fd_index=0x4, 0xfffffffffffff001, 0x7, 0x1000000, 0x9}, 0x0) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r1, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:41 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r6 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:41 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:41 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:41 executing program 5: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r5, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:41 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf21}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r0}, 0x48) fcntl$dupfd(r0, 0x0, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x1, 0xbf22}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r2}, 0x48) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="8510000003800000"], &(0x7f0000000540)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x4, 0xffffffa0, 0x6ebd}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff, r3]}, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf21}, 0x48) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) fcntl$dupfd(r4, 0x0, r5) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x4}, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r6 = syz_io_uring_setup(0x570, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0xff, 0xfffffc01, 0x1ff, 0x420, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5, 0xe}, 0x48) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r6, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:41 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r3) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:42 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r5, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:42 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:42 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x38, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3c07b4d120b3994d67b"}, {0xd8, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f787a19296ba3800b84907da3b950fad1c3baf45a4cfb3a1c"}], 0x110}, 0x40) 01:40:42 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf21}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r0}, 0x48) fcntl$dupfd(r0, 0x0, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x1, 0xbf22}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r2}, 0x48) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="8510000003800000"], &(0x7f0000000540)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x4, 0xffffffa0, 0x6ebd}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff, r3]}, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf21}, 0x48) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) fcntl$dupfd(r4, 0x0, r5) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x4}, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r6 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0xff, 0xfffffc01, 0x1ff, 0x420, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5, 0xe}, 0x48) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r6, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:42 executing program 5: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r5, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 1057.615237][T27921] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1057.616765][T27921] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 01:40:43 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf21}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r0}, 0x48) fcntl$dupfd(r0, 0x0, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x1, 0xbf22}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r2}, 0x48) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="8510000003800000"], &(0x7f0000000540)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x4, 0xffffffa0, 0x6ebd}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff, r3]}, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf21}, 0x48) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) fcntl$dupfd(r4, 0x0, r5) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x4}, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r6 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0xff, 0xfffffc01, 0x1ff, 0x420, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5, 0xe}, 0x48) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r6, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:43 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf21}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r0}, 0x48) fcntl$dupfd(r0, 0x0, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x1, 0xbf22}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r2}, 0x48) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="8510000003800000"], &(0x7f0000000540)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x4, 0xffffffa0, 0x6ebd}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff, r3]}, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf21}, 0x48) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) fcntl$dupfd(r4, 0x0, r5) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x4}, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r6 = syz_io_uring_setup(0x570, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0xff, 0xfffffc01, 0x1ff, 0x420, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5, 0xe}, 0x48) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r6, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:43 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) fcntl$getflags(r0, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r1, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x8}, 0x10001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f00000003c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x1, 0x1}, 0xb63) 01:40:43 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x38, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3c07b4d120b3994d67b"}, {0xd8, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f787a19296ba3800b84907da3b950fad1c3baf45a4cfb3a1c"}], 0x110}, 0x40) [ 1058.492212][T27939] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1058.493279][T27939] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 01:40:43 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r5, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:44 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r6, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:44 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r6, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:44 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf21}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r0}, 0x48) fcntl$dupfd(r0, 0x0, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x1, 0xbf22}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r2}, 0x48) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="8510000003800000"], &(0x7f0000000540)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x4, 0xffffffa0, 0x6ebd}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff, r3]}, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf21}, 0x48) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) fcntl$dupfd(r4, 0x0, r5) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x4}, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r6 = syz_io_uring_setup(0x570, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0xff, 0xfffffc01, 0x1ff, 0x420, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5, 0xe}, 0x48) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r6, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:44 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x38, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3c07b4d120b3994d67b"}, {0xd8, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f787a19296ba3800b84907da3b950fad1c3baf45a4cfb3a1c"}], 0x110}, 0x40) 01:40:44 executing program 0: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x4004, @fd=r3, 0xffffffff, &(0x7f0000000340)=[{&(0x7f0000000100)=""/39, 0x27}, {&(0x7f0000000240)=""/96, 0x60}, {&(0x7f0000000180)=""/24, 0x18}], 0x3, 0x1, 0x1, {0x0, r4}}, 0xfffff7c5) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 1059.458701][T27954] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1059.459736][T27954] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 01:40:44 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r5, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:45 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf21}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r0}, 0x48) fcntl$dupfd(r0, 0x0, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x1, 0xbf22}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r2}, 0x48) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="8510000003800000"], &(0x7f0000000540)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x4, 0xffffffa0, 0x6ebd}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff, r3]}, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf21}, 0x48) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) fcntl$dupfd(r4, 0x0, r5) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x4}, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xd) r6 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0xff, 0xfffffc01, 0x1ff, 0x420, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5, 0xe}, 0x48) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r6, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:45 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) r5 = socket(0x29, 0x2, 0x0) ioctl$SIOCRSGCAUSE(r5, 0x89e2, 0xfffffffffffffffe) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000240)=0x1, 0x4) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000440)={@pppoe={0x18, 0x0, {0x1, @remote, 'macvlan0\x00'}}, {&(0x7f0000000340)=""/229, 0xe5}, &(0x7f0000000180)}, 0xa0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) io_uring_enter(r1, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:45 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r6, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:45 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r6, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:45 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r6, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:46 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r5, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:46 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:46 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x31b081, 0x0) io_uring_enter(r4, 0x6876, 0xe014, 0x2, &(0x7f0000000180)={[0x8]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:47 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100), 0x48) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r5, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:47 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r6, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:47 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r5, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:47 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock, 0x0, 0x0, 0x1}, 0x0) r4 = socket$isdn_base(0x22, 0x3, 0x0) sendto(r4, &(0x7f0000000100)="ad05a1fac1c0fa53d8557622b00c63339dd8dcc2130621b71226bd2b5c14b500cfa520dab7b7c20045a24acd2a2c149c7daf24955e6e6305871a", 0x3a, 0x4040000, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:47 executing program 1: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket(0x29, 0x2, 0x0) ioctl$SIOCRSGCAUSE(r4, 0x89e2, 0xfffffffffffffffe) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r4) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:47 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf21}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r0}, 0x48) fcntl$dupfd(r0, 0x0, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x1, 0xbf22}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r2}, 0x48) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="8510000003800000"], &(0x7f0000000540)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x4, 0xffffffa0, 0x6ebd}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff, r4]}, 0x80) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf21}, 0x48) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) fcntl$dupfd(r5, 0x0, r6) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000180), 0x0}, 0x20) pwritev(r3, 0x0, 0x0, 0xbb9d, 0xd) r7 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r10 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r10, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0xff, 0xfffffc01, 0x1ff, 0x420, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5, 0xe}, 0x48) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r7, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:47 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100), 0x48) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r5, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:48 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf21}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r0}, 0x48) fcntl$dupfd(r0, 0x0, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x1, 0xbf22}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r2}, 0x48) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="8510000003800000"], &(0x7f0000000540)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x4, 0xffffffa0, 0x6ebd}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff, r4]}, 0x80) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf21}, 0x48) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) fcntl$dupfd(r5, 0x0, r6) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000180), 0x0}, 0x20) pwritev(r3, 0x0, 0x0, 0xbb9d, 0xd) r7 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r10 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r10, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0xff, 0xfffffc01, 0x1ff, 0x420, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5, 0xe}, 0x48) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r7, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:48 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock, 0x0, 0x0, 0x1}, 0x0) r4 = socket$isdn_base(0x22, 0x3, 0x0) sendto(r4, &(0x7f0000000100)="ad05a1fac1c0fa53d8557622b00c63339dd8dcc2130621b71226bd2b5c14b500cfa520dab7b7c20045a24acd2a2c149c7daf24955e6e6305871a", 0x3a, 0x4040000, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:48 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = syz_io_uring_setup(0x570, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000015c0), 0x490881, 0x0) lstat(&(0x7f0000001600)='./file0\x00', &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000001540)='./file0\x00', &(0x7f0000001580), 0x20090, &(0x7f00000016c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@posixacl}, {@version_L}, {@fscache}, {@dfltuid={'dfltuid', 0x3d, r6}}, {@noextend}, {@access_client}, {@access_any}, {@access_client}], [{@obj_user}, {@fsuuid={'fsuuid', 0x3d, {[0x39, 0x31, 0x34, 0x38, 0x34, 0x34, 0x31, 0x62], 0x2d, [0x30, 0x36, 0x31, 0x64], 0x2d, [0x38, 0x30, 0x61, 0x65], 0x2d, [0x1a39902629c131c, 0x0, 0x64, 0x38], 0x2d, [0x64, 0x0, 0x66, 0x61, 0xb, 0x0, 0x61, 0x65]}}}, {@fowner_lt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}}) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f0000000340)="3b767161997779e6988bb1e551684785167b1ae3d1a13ba752fbe2d0713150db4d250918555b7a84dcf687fa90343b7c5866790894e3ca21d516e25f0264b402018edeb2107a7319beb6afb095d00ce960ae17a63c23dc854570e88978a0fb07ae4ae0d2f105b9134bdb94688db8ba1b8d7178791d14cf7fb2627fad3a72f7c2eaaf29127b47c17d7762c876ed9392e33cfc2bed95782b51374989ab03e3dcb6ec205164cbbc78eaf983fc29d1722b7144b76d67f5a029365aa9addc244c0d481d2d666e3c38fa7ebbcc6be20a13916078e0371d2fafe2c6650d4b09c3218eabe7", 0xe1}, {&(0x7f0000000240)="4a9a283599ff520062e819b316e0dcae5fd68f3f30c7d2a430a2b0b6e550a5edb18464dfe2e90500d1c5abc4865c89ee62313be0fd9318c61426044f91bcd6858f27ae7ca922ce384e6fc8a196b44a9bdcf99f4cede0115c4e9f7f44b885b2095dae7e6dbd5c1cc0fe111d22712a", 0x6e}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="0c508aa7d4b50ebd9bd44015f140ed2f5833cd6609da73488fdf6ca255eceb2f369c1327525d7a66440fd0c65444eb890dbaadfb6e4008c8703d37c1b12dfd2deeefa6155921d21a8b76654c0039641bacaacd6a112e02f84c521b5ebf28a24b0118e0887d3a5e", 0x67}, {&(0x7f0000000180)="c33b4a0bc3a64dd5e75e48ffc2e30d30ce100711e13f55109f9cabc4e24ce3a889737e12a339de6fe73e9db1", 0x2c}], 0x5) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r7, &(0x7f0000000380)={'#! ', './file0', [], 0xa, "8131187ac359eac651da61f596ddd2481f55e697e4d8d9ca393f7a9fe38c203187e8406e2fc2598c844f11e20e649745c234326a2d5dee714ccf23ebbcd759298d30d58e81615ff992ed82ad3bd018c29928ef4d97df9b6ef4c0af0a6aaf89a31a83ea89d31d7821236786d3a99258f759bfdc4f6ff2f7bccf52f0ac7c5474c65dcc614c1d324ab6b6996ea8ae86ea9b2e7521574c89573fe93ac3339ac38b443f3ce0cf3dadb5d523fd446ae127e03f609f269855f701922255bd3de8c7df8c2ac8acf2ba850bb198a1ec381b30dec084ca170732947a667eb9f050ef9ed8613be902b777fd76ebdaea1839eef28195b3e482569e0a8721ff62b07d75e35b9af9f3c37ca32f110ce06e831610fbe253a5838e13f873d14030cd4a38eb5d5b9c3ee6b5cacd5a97f963cbdac7d36bdd4907a4b876ac1011f8cd415803af26279729a6631fe31bd22a813640e555792f49a83c4cb824b19e72789c60604a1259ea0e19ebce9ad9c70523de966a5d3ef1d6a6f2ab069be96dd69bb987bbc74eadeea4e0b7829f07d7d541dcebdecaf21a19a0602b881d9e33fdddcb33116e1717b7fc4b87626cdca46b44859ca172936229a52151e9a3cecd9d5c7fe56bdfa812dc0f79332d1d892ae9249f8645fb91943cf4edb2c82fc516282093357f428360a76170698418b1330f85d680497ba790f6e88409d10b3fbc12ae9bcedb7980a62428eefdc7935b39ac80aefbeefc6a03c9d4bbc2430d41a3b529550a53d216ef00f88626195c9a0f885a3f5843aaa0587b368073cb3f62d34409d223184caed619c90057fdd3ef7db70d382861a6bbe13aca6be7461629683d31c9b37cec28feb17bc0b60f120e78f04dda92f73d1c5a7940f4b0d0a673a301459e7e79f77e6f78bee660dbc9f475f126ac9b951f5f947022d74be4e08d7924a464c7a7b6231ca74a75eeade97c98c5ea60796ee186dab1e0eb991e42084a992bf3900651fb367dac90ab25071beff105e3538efe389f6b9cecc8a31f1545fa3b154c029a6f58f109563acffa7a7cccc28f3be4052c1e8e1d83c7b50e6ff11d49490a1b0c07ebd033c854467ec114df0ff206af0359bf06c34f8753bf94ed5c023eebe3b6dbf72d9281ad7dc818f23b56168d2684b1d674cb108d58aed6018e414a8f47e2830194653937eac9b64dae2f220b120bce448afd4c56f6085b107d19bdb59e440256da2d8ee88a75283648abb4dfc377cf7ca33409d3ae83e34fa8bd97137e5599b9995ff6bf7e2a3e6d07cd206551e4d5c7771c775d0cebdbed43327eb04bbc47f6bd1685f72f00b3b8fa5ae54a1c21e56cc4e3972e135f88ef10624bc0c4813b71e9caccba33f70a0d6e77c25eed4442d2dd6f5897460f74f28baa8d9e1adcab26444c536e67aaf7ea86d627f416f5b489f85234de576d2e775a98f5a0aafb1de41bd9a4e63491b2db36a2e6ea7cae6f3091f285b2f7144c5f705ff55ee5571536cf7ff67da5dcea7e12fb8884e7754a18eb1b4449dd43de4113ce8c95cfa9e45838e53594a60ae1e58664c2940aef7379ea186e0a432985c9fb49fdfe8592b1f26d78fb14ea514207912b14acb10848cc2a96f0d2f5cb18dd5f9eb608b1d967d074295a232f49926caae816dbbd1fae14ef19d2c1ffe1fe8377d9f139b200bbee9177747430fb6992fb7b5be057079e81c128fdcc0d5968f0eac30d6136451f97e7849aa74022d8793cebf543fee1dcb4b2de7b9c61a79b0c520cf63b556bb4ba90c3d033613b856618384623be7a701b491b97384ff5231b8feb9eceaa39115cd36e41e2c8d406f462ba12648130d6cec40772c3293cdc4b072933ec3b78e5ecdc229daaba12033d6453b2845c1ef781d2bb47999cba22e4ba27478b1e56cd3c214156144457c0ab03a20a709bfcc87276bcaceaa215fbfe2fcf6edda012db44adb36db589043e65d8ee4fad01df52b8b5bd004fd37f3e9e09cf17f8638dff755eac436e9a0dbe5434752cdc8c62b0db9b84b6b2d1064a20aef5785ebe4020427a2951bd8bb62eacb299e50344804545ecddce6a7d8b0ce6acb931f924595e79af50108742358fb19b9ea2d1d806c1c3cbf058482a23718137d4fe7498989a7514a89df9c6a014a2d9727248202b332bd60720dc1f3c29c89997e891df06702e32cf13c73902ae1e757435bbf090a6d53f6b9c544151c31657ae7ad6e5bda2bf9990c1a6bb33494bc3c98820317e4ac25b34bae4b92e058ee7f1f2cd6107443bcd262aaf4494a4a9bbe11c5e80d3e0c68e5620ae8273cf1a43f942b46cb9e0e44c1ba2e07c54f131a115baea8c0f426c36326664c9d663aec4ce4c350417162137ac3aa52bbefd519a9153fe6dada5eb91a2f520b1794fd122c10bfc8671bbe9c1d0195cbcb2ecd1857089824e32ba0b5be83494e7107f2af6b0986b95f572b2bee7f2b8bbbf929d12c166e2026c26890fa02205535a13ef5052a754aa40d635ec26138892bd8f1c694db0bc9346ad8a8fe66a9cdbc4238c7ccaac2549db19c4a24b7c50d888ce2444f5773f997e8832562f9b2020a1f298e183d66c0010278e5ad912dd7719ca00024df179b7c271549d152d234d563f9c57ba05dd8ce538da862b681b1f3e951dc62d15b147d2238e57645e79a467b0349459b0c798912fb334cf38e982886831d4565dc4e54288a5ebbfdecb1d59a0f85bd402f66371fb1e8fd4dc2077cd14c8027752a853fc98e9dc7f46d75f4da3b779e11c72553aeac72de8b63a78712552732d31a7f84fe332a56dbbbb72b8b11ba1f34d2995297667bec89dbd9925765718455d994ae7ad2870be36c637fa5e9c6c2ab9c96f02e28435530ebc1311af48657c2f34b75b1c71baa3d8e58eddde3d11e1ac"}, 0x805) bpf$MAP_CREATE(0x0, &(0x7f0000001800)=@base={0x4, 0x2, 0x2, 0x1f, 0x4, 0xffffffffffffffff, 0x6, '\x00', 0x0, r7, 0x4, 0x4}, 0x48) io_uring_enter(r1, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:48 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100), 0x48) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r5, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:48 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:49 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r5, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:49 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x3, 0xfffffff7, 0x40, 0xbc2, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x0, 0x3}, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:49 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) r6 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) connect$vsock_stream(r6, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:49 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x38, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3c07b4d120b3994d67b"}, {0xd8, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f787a19296ba3800b84907da3b950fad1c3baf45a4cfb3a1c"}], 0x110}, 0x40) 01:40:49 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000003c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = socket(0x29, 0x2, 0x0) ioctl$SIOCRSGCAUSE(r4, 0x89e2, 0xfffffffffffffffe) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x3) connect$vsock_stream(r2, &(0x7f0000000000), 0x10) 01:40:49 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x2, 0xfff, 0x5, 0x44f, 0xffffffffffffffff, 0xfffffff8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x200000, 0x0) r4 = syz_io_uring_setup(0x570, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0xffffffff, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) r8 = syz_io_uring_setup(0x43ef, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000040)=0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x24, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4805) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000140)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x0, {}, 0x0, 0x0, 0x0, {0x0, r11}}, 0x1) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x9, 0x0, 0x0, 0x4, 0x1, {0x2, r12}}, 0x100) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r7, &(0x7f0000000000), 0x10) io_uring_enter(r4, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 1064.723559][T28042] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 01:40:50 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) r0 = syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r5, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 1064.726820][T28042] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:40:50 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) r6 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:50 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:50 executing program 4: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) fspick(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000180)=0x3, 0x8) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:50 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0x0, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x38, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3c07b4d120b3994d67b"}, {0xd8, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f787a19296ba3800b84907da3b950fad1c3baf45a4cfb3a1c"}], 0x110}, 0x40) 01:40:51 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) r0 = syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r5, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 1065.844011][T28061] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1065.845443][T28061] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 01:40:51 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r5, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:51 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0x0, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x38, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3c07b4d120b3994d67b"}, {0xd8, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f787a19296ba3800b84907da3b950fad1c3baf45a4cfb3a1c"}], 0x110}, 0x40) 01:40:51 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) r6 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r6, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:51 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf21}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r0}, 0x48) fcntl$dupfd(r0, 0x0, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x1, 0xbf22}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r2}, 0x48) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="8510000003800000"], &(0x7f0000000540)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x4, 0xffffffa0, 0x6ebd}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff, r4]}, 0x80) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x0, 0x1, 0xbf21}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r5}, 0x48) r7 = fcntl$dupfd(r5, 0x0, r6) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r3, &(0x7f0000000180), &(0x7f0000000240)=@tcp=r7, 0x4}, 0x20) pwritev(r3, 0x0, 0x0, 0xbb9d, 0xd) r8 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r11 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r11, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0xff, 0xfffffc01, 0x1ff, 0x420, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5, 0xe}, 0x48) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r8, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:51 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x38, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3c07b4d120b3994d67b"}, {0xd8, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f787a19296ba3800b84907da3b950fad1c3baf45a4cfb3a1c"}], 0x110}, 0x40) [ 1066.717932][T28074] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 01:40:52 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) r0 = syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r5, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 1066.718940][T28074] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1066.864235][T28081] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1066.865373][T28081] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 01:40:52 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:52 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"/561], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={r1, r0, 0x2}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r5, &(0x7f0000000000), 0x10) io_uring_enter(r2, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:52 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100055113dd597e61c2b21765d443093", @ANYRES32=r4, @ANYRES16], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) socket(0x26, 0x2, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast2, 0x4e21, 0xfff, 0x4e22, 0xe0b9, 0xa, 0xe0, 0x80, 0x88, r4, r5}, {0x8000000000000001, 0x0, 0x80, 0x1, 0xb82, 0x8, 0x33, 0x4}, {0xfffffffffffffffa, 0x7, 0x4acb, 0xed44}, 0xfff, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3500, 0x3, 0x1, 0x1, 0x3ff, 0x9, 0x3}}, 0xe8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000002040)=ANY=[@ANYBLOB="f959f8fffcffffff182a0000", @ANYRES32, @ANYBLOB="00000000080000001843000005000000000000000000000018420000fcffffff000000000000000018440000000000000000000000000000280bf3ff04000000184300000600000000000000000000001800000000000000000000000100000018160000", @ANYRES32=0x1, @ANYBLOB="bd107bdd6b363b5f0473be910000000000000000cb52ffff04000000"], &(0x7f0000000500)='GPL\x00', 0x20, 0xb4, &(0x7f0000000840)=""/180, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x3, 0x4, 0x7bdb}, 0x10, 0x26e06, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0x1, 0x1]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6gre0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @mcast1, 0x700, 0x20, 0xbb}}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0, 0x28}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000580)="cf06be37d304ca8e5130113a3cb780a367ce8ce3d48f40fdb6d28475bcf58b3fa9b624cd597886950fbcd7a43903e99c7a56323817630f44742d8847872b7ab42b30a16d8d1930476350bd45c61da05f6c47d255bdc8e5097f220a099118a2c8331c9367440186052984cb831286f199bfe2de0e735266732aad6bbe437b44c49986a5ff0ade472f55fbef777387f4155f3ea1ec67a9a18be84b3a0af379dddfc3a859bcc5e0792e56bfb671da3d0c9e3924cf91cfac892dd8dd7e1c72c5567f8efc41669a938ab33c3ea1c0a2a1e40cbc671d522a20d6dd11998ba094", 0xdd}], 0x1, &(0x7f0000000680)=[{0x38, 0x10a, 0x0, "c00bb53cdd7ee4a29cac3ab3161cff35f69947a402ca05017114c2cab3c07b4d120b3994d67b"}, {0xd8, 0x118, 0x96, "b008c3e0852d861c86a59b95131a096fd2071b09abcc46b814afd524f16765e95bbbb1e60c402d65bf9fdeb997851f0d7ab58df072ba1188038559bffff15ef55e8b49c6941c79c02a33ff9eef625142a9ec425f826d7e97051ee017788c4b94c13929ab4018ec3172723a629a28681420b9087d38f6e9356f00a128ecbd9fb55eda4c3e9f31a0b16d48e875c07101e9773db8bb3525600157e60ed675183dabaf79daf50bb83cbb3f3f787a19296ba3800b84907da3b950fad1c3baf45a4cfb3a1c"}], 0x110}, 0x40) 01:40:53 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) r0 = syz_io_uring_setup(0x570, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r5, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:53 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:53 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:53 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"/561], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={r1, r0, 0x2}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r5, &(0x7f0000000000), 0x10) io_uring_enter(r2, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:53 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000700) 01:40:54 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf21}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r0}, 0x48) fcntl$dupfd(r0, 0x0, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x1, 0xbf22}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r2}, 0x48) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="8510000003800000"], &(0x7f0000000540)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x4, 0xffffffa0, 0x6ebd}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf21}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r5}, 0x48) r7 = fcntl$dupfd(r5, 0x0, r6) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r3, &(0x7f0000000180), &(0x7f0000000240)=@tcp=r7, 0x4}, 0x20) pwritev(r3, 0x0, 0x0, 0xbb9d, 0xd) r8 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r11 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r11, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0xff, 0xfffffc01, 0x1ff, 0x420, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5, 0xe}, 0x48) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r8, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 1069.334759][T20042] device hsr_slave_0 left promiscuous mode [ 1069.335349][T20042] device hsr_slave_1 left promiscuous mode [ 1069.357253][T20042] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1069.357295][T20042] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1069.359652][T20042] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1069.359675][T20042] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1069.370147][T20042] device bridge_slave_1 left promiscuous mode [ 1069.370288][T20042] bridge0: port 2(bridge_slave_1) entered disabled state [ 1069.371748][T20042] device bridge_slave_0 left promiscuous mode [ 1069.371868][T20042] bridge0: port 1(bridge_slave_0) entered disabled state [ 1069.403414][T20042] device veth1_macvtap left promiscuous mode [ 1069.403490][T20042] device veth0_macvtap left promiscuous mode [ 1069.403626][T20042] device veth1_vlan left promiscuous mode [ 1069.403714][T20042] device veth0_vlan left promiscuous mode 01:40:55 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000282) 01:40:55 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf21}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r0}, 0x48) fcntl$dupfd(r0, 0x0, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x1, 0xbf22}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r2}, 0x48) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="8510000003800000"], &(0x7f0000000540)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x4, 0xffffffa0}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff, r4]}, 0x80) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf21}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r5}, 0x48) r7 = fcntl$dupfd(r5, 0x0, r6) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r3, &(0x7f0000000180), &(0x7f0000000240)=@tcp=r7, 0x4}, 0x20) pwritev(r3, 0x0, 0x0, 0xbb9d, 0xd) r8 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r11 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r11, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0xff, 0xfffffc01, 0x1ff, 0x420, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5, 0xe}, 0x48) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r8, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 1070.851973][T20042] team0 (unregistering): Port device team_slave_1 removed [ 1070.872326][T20042] team0 (unregistering): Port device team_slave_0 removed [ 1070.894317][T20042] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1070.947484][T20042] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1071.188396][T20042] bond0 (unregistering): Released all slaves 01:40:56 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x700000000000000, 0x0, 0x200000000000000) 01:40:57 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf21}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r0}, 0x48) fcntl$dupfd(r0, 0x0, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x1, 0xbf22}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r2}, 0x48) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="8510000003800000"], &(0x7f0000000540)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x4, 0x0, 0x6ebd}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff, r4]}, 0x80) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf21}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r5}, 0x48) r7 = fcntl$dupfd(r5, 0x0, r6) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r3, &(0x7f0000000180), &(0x7f0000000240)=@tcp=r7, 0x4}, 0x20) pwritev(r3, 0x0, 0x0, 0xbb9d, 0xd) r8 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r11 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r11, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0xff, 0xfffffc01, 0x1ff, 0x420, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5, 0xe}, 0x48) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r8, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 01:40:57 executing program 2: r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x8000000000000, 0x0, 0x200000000000000) [ 1072.888525][T28117] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1072.922502][T28117] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1072.927324][T28117] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1072.956214][T28117] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1072.958024][T28117] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1072.958814][T28117] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1073.322577][T28106] chnl_net:caif_netlink_parms(): no params data found [ 1073.544272][T28106] bridge0: port 1(bridge_slave_0) entered blocking state [ 1073.544402][T28106] bridge0: port 1(bridge_slave_0) entered disabled state [ 1073.545541][T28106] device bridge_slave_0 entered promiscuous mode [ 1073.567929][T28106] bridge0: port 2(bridge_slave_1) entered blocking state [ 1073.575967][T28106] bridge0: port 2(bridge_slave_1) entered disabled state [ 1073.578845][T28106] device bridge_slave_1 entered promiscuous mode [ 1073.620530][T28106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1073.622739][T28106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1073.676468][T28106] team0: Port device team_slave_0 added [ 1073.684645][T28106] team0: Port device team_slave_1 added [ 1073.716037][T28106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1073.716053][T28106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1073.716075][T28106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1073.726957][T28106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1073.726971][T28106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1073.727032][T28106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1073.818015][T28106] device hsr_slave_0 entered promiscuous mode [ 1073.818584][T28106] device hsr_slave_1 entered promiscuous mode [ 1073.818893][T28106] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1073.818907][T28106] Cannot create hsr debugfs directory [ 1073.885295][T20042] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.931641][T20042] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.934970][T28106] bridge0: port 2(bridge_slave_1) entered blocking state [ 1073.935013][T28106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1073.935113][T28106] bridge0: port 1(bridge_slave_0) entered blocking state [ 1073.935155][T28106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1073.993226][T20042] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.013003][T28106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1074.026073][T20042] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.038819][T19126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1074.043347][T19126] bridge0: port 1(bridge_slave_0) entered disabled state [ 1074.051158][T19126] bridge0: port 2(bridge_slave_1) entered disabled state [ 1074.059421][T19126] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1074.078843][T28106] 8021q: adding VLAN 0 to HW filter on device team0 [ 1074.094159][ T5654] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1074.094462][ T5654] bridge0: port 1(bridge_slave_0) entered blocking state [ 1074.094496][ T5654] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1074.094725][ T5654] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1074.095007][ T5654] bridge0: port 2(bridge_slave_1) entered blocking state [ 1074.095041][ T5654] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1074.101154][T19126] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1074.101771][T19126] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1074.106457][T19126] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1074.111568][ T5654] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1074.118532][T19126] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1074.133864][T28106] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1074.163899][ T5654] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1074.164039][ T5654] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1074.183060][T28106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1074.269597][T20042] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.317151][T20042] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.381125][T20042] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.443810][T20042] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.619862][T28150] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1074.622312][T28150] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1074.624100][T28150] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1074.625602][T28150] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1074.626655][T28150] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1074.627549][T28150] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1074.628184][T28150] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1074.628662][T28150] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1074.628875][T28150] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1074.630755][T28150] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1074.631173][T28150] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1074.631400][T28150] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1074.632443][T28150] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1074.632657][T28150] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1074.632880][T28150] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1074.633094][T28150] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1074.633302][T28150] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1074.633517][T28150] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1075.120137][T28164] Bluetooth: hci0: command 0x0409 tx timeout [ 1075.277709][T28128] chnl_net:caif_netlink_parms(): no params data found [ 1075.366526][T28126] chnl_net:caif_netlink_parms(): no params data found [ 1075.404484][T28106] device veth0_vlan entered promiscuous mode [ 1075.406569][T28165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1075.407327][T28165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1075.407890][T28165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1075.408428][T28165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1075.505427][T28127] chnl_net:caif_netlink_parms(): no params data found [ 1075.523576][T28106] device veth1_vlan entered promiscuous mode [ 1075.528012][T28165] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1075.528538][T28165] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1075.528954][T28165] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1075.670070][T28128] bridge0: port 1(bridge_slave_0) entered blocking state [ 1075.670133][T28128] bridge0: port 1(bridge_slave_0) entered disabled state [ 1075.671194][T28128] device bridge_slave_0 entered promiscuous mode [ 1075.768097][T28128] bridge0: port 2(bridge_slave_1) entered blocking state [ 1075.768158][T28128] bridge0: port 2(bridge_slave_1) entered disabled state [ 1075.769265][T28128] device bridge_slave_1 entered promiscuous mode [ 1075.896118][T28106] device veth0_macvtap entered promiscuous mode [ 1075.903767][T28091] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1075.904372][T28091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1075.904878][T28091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1075.926779][T28128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1075.974847][T28127] bridge0: port 1(bridge_slave_0) entered blocking state [ 1075.974909][T28127] bridge0: port 1(bridge_slave_0) entered disabled state [ 1075.975946][T28127] device bridge_slave_0 entered promiscuous mode [ 1075.977751][T28126] bridge0: port 1(bridge_slave_0) entered blocking state [ 1075.977804][T28126] bridge0: port 1(bridge_slave_0) entered disabled state [ 1075.978725][T28126] device bridge_slave_0 entered promiscuous mode [ 1075.981841][T28106] device veth1_macvtap entered promiscuous mode [ 1076.002172][T28091] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1076.002842][T28091] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1076.005111][T28128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1076.034463][T28106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1076.034482][T28106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1076.034490][T28106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1076.034501][T28106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1076.034509][T28106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1076.034519][T28106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1076.034528][T28106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1076.034537][T28106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1076.034545][T28106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1076.034555][T28106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1076.035725][T28106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1076.047246][T28126] bridge0: port 2(bridge_slave_1) entered blocking state [ 1076.047307][T28126] bridge0: port 2(bridge_slave_1) entered disabled state [ 1076.048336][T28126] device bridge_slave_1 entered promiscuous mode [ 1076.078672][T28127] bridge0: port 2(bridge_slave_1) entered blocking state [ 1076.078732][T28127] bridge0: port 2(bridge_slave_1) entered disabled state [ 1076.079797][T28127] device bridge_slave_1 entered promiscuous mode [ 1076.204486][T28165] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1076.205081][T28165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1076.210363][T28128] team0: Port device team_slave_0 added [ 1076.211001][T28106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1076.211017][T28106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1076.211026][T28106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1076.211036][T28106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1076.211045][T28106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1076.211055][T28106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1076.211064][T28106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1076.211074][T28106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1076.211082][T28106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1076.211093][T28106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1076.212185][T28106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1076.213315][T28128] team0: Port device team_slave_1 added [ 1076.290270][T28126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1076.292303][T28126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1076.425134][ T3656] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 1076.478733][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1076.479376][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1076.510687][T28126] team0: Port device team_slave_0 added [ 1076.512538][T28126] team0: Port device team_slave_1 added [ 1076.532500][T28127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1076.535365][T28127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1076.608562][T28128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1076.608577][T28128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1076.608599][T28128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1076.612818][T28128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1076.612831][T28128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1076.612852][T28128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1076.657340][T28090] Bluetooth: hci4: command 0x0409 tx timeout [ 1076.657388][T28090] Bluetooth: hci5: command 0x0409 tx timeout [ 1076.737140][T19126] Bluetooth: hci3: command 0x0409 tx timeout [ 1076.799712][T28126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1076.799726][T28126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1076.799757][T28126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1076.803366][T28128] device hsr_slave_0 entered promiscuous mode [ 1076.823184][T28128] device hsr_slave_1 entered promiscuous mode [ 1076.827134][T28128] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1076.827158][T28128] Cannot create hsr debugfs directory [ 1076.832386][T28127] team0: Port device team_slave_0 added [ 1076.837668][T28126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1076.837680][T28126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1076.837703][T28126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1076.961635][T28127] team0: Port device team_slave_1 added [ 1077.033288][T28126] device hsr_slave_0 entered promiscuous mode [ 1077.033982][T28126] device hsr_slave_1 entered promiscuous mode [ 1077.047688][T28126] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1077.047712][T28126] Cannot create hsr debugfs directory [ 1077.137792][T19126] Bluetooth: hci0: command 0x041b tx timeout [ 1077.155175][T28127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1077.155189][T28127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1077.155209][T28127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1077.157930][T28127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1077.157943][T28127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1077.157965][T28127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1077.366854][T28127] device hsr_slave_0 entered promiscuous mode [ 1077.367941][T28127] device hsr_slave_1 entered promiscuous mode [ 1077.375291][T28127] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1077.375316][T28127] Cannot create hsr debugfs directory [ 1077.388479][T14558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1077.388495][T14558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1077.455595][T19126] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 01:41:03 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf21}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r0}, 0x48) fcntl$dupfd(r0, 0x0, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x1, 0xbf22}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r2}, 0x48) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="8510000003800000"], &(0x7f0000000540)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x0, 0xffffffa0, 0x6ebd}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff, r4]}, 0x80) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf21}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r5}, 0x48) r7 = fcntl$dupfd(r5, 0x0, r6) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r3, &(0x7f0000000180), &(0x7f0000000240)=@tcp=r7, 0x4}, 0x20) pwritev(r3, 0x0, 0x0, 0xbb9d, 0xd) r8 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r11 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r11, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0xff, 0xfffffc01, 0x1ff, 0x420, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5, 0xe}, 0x48) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r8, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 1077.672543][T14558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1077.672562][T14558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1077.741156][T19126] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1078.061201][T28212] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1078.266878][T28212] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 1078.418591][T28128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1078.547980][T20042] device hsr_slave_0 left promiscuous mode [ 1078.548526][T20042] device hsr_slave_1 left promiscuous mode [ 1078.549128][T20042] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1078.549176][T20042] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1078.551282][T20042] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1078.551308][T20042] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1078.553356][T20042] device bridge_slave_1 left promiscuous mode [ 1078.553486][T20042] bridge0: port 2(bridge_slave_1) entered disabled state [ 1078.555768][T20042] device bridge_slave_0 left promiscuous mode [ 1078.555890][T20042] bridge0: port 1(bridge_slave_0) entered disabled state [ 1078.578461][T20042] device hsr_slave_0 left promiscuous mode [ 1078.579046][T20042] device hsr_slave_1 left promiscuous mode [ 1078.579640][T20042] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1078.579684][T20042] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1078.581837][T20042] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1078.581862][T20042] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1078.587303][T20042] device bridge_slave_1 left promiscuous mode [ 1078.587424][T20042] bridge0: port 2(bridge_slave_1) entered disabled state [ 1078.588817][T20042] device bridge_slave_0 left promiscuous mode [ 1078.588937][T20042] bridge0: port 1(bridge_slave_0) entered disabled state [ 1078.632458][T20042] device hsr_slave_0 left promiscuous mode [ 1078.640067][T20042] device hsr_slave_1 left promiscuous mode [ 1078.641021][T20042] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1078.641074][T20042] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1078.643253][T20042] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1078.643281][T20042] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1078.645364][T20042] device bridge_slave_1 left promiscuous mode [ 1078.645481][T20042] bridge0: port 2(bridge_slave_1) entered disabled state [ 1078.646915][T20042] device bridge_slave_0 left promiscuous mode [ 1078.657375][T20042] bridge0: port 1(bridge_slave_0) entered disabled state [ 1078.671287][T20042] device hsr_slave_0 left promiscuous mode [ 1078.672662][T20042] device hsr_slave_1 left promiscuous mode [ 1078.673268][T20042] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1078.673324][T20042] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1078.678085][T20042] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1078.678112][T20042] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1078.697289][T20042] device bridge_slave_1 left promiscuous mode [ 1078.697417][T20042] bridge0: port 2(bridge_slave_1) entered disabled state [ 1078.734878][T20042] device bridge_slave_0 left promiscuous mode [ 1078.735208][T20042] bridge0: port 1(bridge_slave_0) entered disabled state [ 1078.737398][T28163] Bluetooth: hci5: command 0x041b tx timeout [ 1078.737442][T28163] Bluetooth: hci4: command 0x041b tx timeout [ 1078.812624][T20042] device veth1_macvtap left promiscuous mode [ 1078.812686][T20042] device veth0_macvtap left promiscuous mode [ 1078.812808][T20042] device veth1_vlan left promiscuous mode [ 1078.813701][T20042] device veth0_vlan left promiscuous mode [ 1078.827361][T28163] Bluetooth: hci3: command 0x041b tx timeout [ 1078.845968][T20042] device veth1_macvtap left promiscuous mode [ 1078.846034][T20042] device veth0_macvtap left promiscuous mode [ 1078.846162][T20042] device veth1_vlan left promiscuous mode [ 1078.846252][T20042] device veth0_vlan left promiscuous mode [ 1078.863481][T20042] device veth1_macvtap left promiscuous mode [ 1078.864803][T20042] device veth0_macvtap left promiscuous mode [ 1078.864933][T20042] device veth1_vlan left promiscuous mode [ 1078.865018][T20042] device veth0_vlan left promiscuous mode [ 1078.866729][T20042] device veth1_macvtap left promiscuous mode [ 1078.866784][T20042] device veth0_macvtap left promiscuous mode [ 1078.866905][T20042] device veth1_vlan left promiscuous mode [ 1078.867046][T20042] device veth0_vlan left promiscuous mode [ 1079.222338][T28163] Bluetooth: hci0: command 0x040f tx timeout [ 1079.902003][T20042] team0 (unregistering): Port device team_slave_1 removed [ 1079.915670][T20042] team0 (unregistering): Port device team_slave_0 removed [ 1079.926845][T20042] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1079.945265][T20042] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1080.012845][T20042] bond0 (unregistering): Released all slaves [ 1080.141427][T20042] team0 (unregistering): Port device team_slave_1 removed [ 1080.146637][T20042] team0 (unregistering): Port device team_slave_0 removed [ 1080.165974][T20042] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1080.178573][T20042] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1080.245883][T20042] bond0 (unregistering): Released all slaves [ 1080.401680][T20042] team0 (unregistering): Port device team_slave_1 removed [ 1080.406424][T20042] team0 (unregistering): Port device team_slave_0 removed [ 1080.424684][T20042] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1080.438664][T20042] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1080.516649][T20042] bond0 (unregistering): Released all slaves [ 1080.681089][T20042] team0 (unregistering): Port device team_slave_1 removed [ 1080.686107][T20042] team0 (unregistering): Port device team_slave_0 removed [ 1080.702339][T20042] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1080.725974][T20042] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1080.786851][T20042] bond0 (unregistering): Released all slaves [ 1080.817965][ T3686] Bluetooth: hci4: command 0x040f tx timeout [ 1080.818061][ T3686] Bluetooth: hci5: command 0x040f tx timeout [ 1080.843022][T28128] 8021q: adding VLAN 0 to HW filter on device team0 [ 1080.858275][T28152] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1080.865461][T28090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1080.865988][T28090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1080.870095][T28152] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1080.871360][T28126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1080.877255][T28152] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1080.902235][ T3686] Bluetooth: hci3: command 0x040f tx timeout [ 1080.903976][T28150] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1080.905127][T28150] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1080.905453][T28150] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1080.928577][T19126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1080.929123][T19126] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1080.929497][T19126] bridge0: port 1(bridge_slave_0) entered blocking state [ 1080.929561][T19126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1080.929949][T19126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1080.930395][T19126] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1080.930746][T19126] bridge0: port 2(bridge_slave_1) entered blocking state [ 1080.930799][T19126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1080.931261][T19126] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1080.960853][T28127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1080.976532][T28090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1081.014344][T28126] 8021q: adding VLAN 0 to HW filter on device team0 [ 1081.075713][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1081.076490][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1081.080218][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1081.080871][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1081.081513][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1081.082078][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1081.082551][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1081.083013][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1081.083477][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1081.083965][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1081.084448][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1081.084841][ T3685] bridge0: port 1(bridge_slave_0) entered blocking state [ 1081.084893][ T3685] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1081.085262][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1081.085733][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1081.086080][ T3685] bridge0: port 2(bridge_slave_1) entered blocking state [ 1081.086128][ T3685] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1081.092038][T28127] 8021q: adding VLAN 0 to HW filter on device team0 [ 1081.139772][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1081.140444][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1081.140933][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1081.141783][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1081.142233][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1081.142716][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1081.143086][ T3685] bridge0: port 1(bridge_slave_0) entered blocking state [ 1081.143137][ T3685] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1081.143493][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1081.143955][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1081.144436][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1081.199031][T28128] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1081.216491][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1081.221125][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1081.221620][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1081.221979][ T3685] bridge0: port 2(bridge_slave_1) entered blocking state [ 1081.222030][ T3685] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1081.222386][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1081.223098][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1081.223771][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1081.224430][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1081.225458][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1081.226029][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1081.226638][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1081.240158][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1081.240695][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1081.241681][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1081.280021][T28126] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1081.280733][T28126] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1081.286932][T28128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1081.304027][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1081.305206][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1081.305827][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1081.306534][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1081.308449][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1081.309031][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1081.309567][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1081.310131][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1081.310659][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1081.311209][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1081.312343][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1081.312484][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1081.312786][ T3686] Bluetooth: hci0: command 0x0419 tx timeout [ 1081.313034][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1081.325862][T28127] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1081.358111][T28234] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1081.358287][T28234] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1081.380074][T28126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1081.503718][T28127] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1081.532610][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1081.532780][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1081.626943][T28240] chnl_net:caif_netlink_parms(): no params data found [ 1081.839812][T28240] bridge0: port 1(bridge_slave_0) entered blocking state [ 1081.839873][T28240] bridge0: port 1(bridge_slave_0) entered disabled state [ 1081.840877][T28240] device bridge_slave_0 entered promiscuous mode [ 1081.842548][T28240] bridge0: port 2(bridge_slave_1) entered blocking state [ 1081.842606][T28240] bridge0: port 2(bridge_slave_1) entered disabled state [ 1081.843493][T28240] device bridge_slave_1 entered promiscuous mode [ 1081.949112][T28240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1081.963143][T28240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1082.072609][T28240] team0: Port device team_slave_0 added [ 1082.079829][T28240] team0: Port device team_slave_1 added [ 1082.181572][T28240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1082.181587][T28240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1082.181610][T28240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1082.188597][T28240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1082.188611][T28240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1082.188634][T28240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1082.286900][T28240] device hsr_slave_0 entered promiscuous mode [ 1082.293495][T28240] device hsr_slave_1 entered promiscuous mode [ 1082.611950][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1082.612605][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1082.639854][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1082.640484][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1082.641249][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1082.641742][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1082.653849][T28126] device veth0_vlan entered promiscuous mode [ 1082.713131][T28126] device veth1_vlan entered promiscuous mode [ 1082.767421][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1082.768039][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1082.768591][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1082.769129][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1082.779406][T28163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1082.780064][T28163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1082.801017][T28126] device veth0_macvtap entered promiscuous mode [ 1082.870475][T28126] device veth1_macvtap entered promiscuous mode [ 1082.885319][T28126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1082.885338][T28126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 01:41:09 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x6}, 0x48) r0 = syz_io_uring_setup(0x570, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$vsock_stream(r5, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 1082.885347][T28126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1082.885358][T28126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.886729][T28126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1082.893334][T28163] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1082.893935][T28163] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1082.894531][T28163] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1082.895072][T28163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1082.895627][T28163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1082.896272][T28163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1082.901612][T28163] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1082.902222][T28163] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1082.905147][T28128] device veth0_vlan entered promiscuous mode [ 1082.910151][T28126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1082.910167][T28126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.910176][T28126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1082.910195][T28126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.911297][T28126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1082.913312][T28163] Bluetooth: hci5: command 0x0419 tx timeout [ 1082.913385][T28163] Bluetooth: hci4: command 0x0419 tx timeout [ 1082.953450][T28128] device veth1_vlan entered promiscuous mode [ 1082.978019][T28163] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1082.978673][T28163] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1082.979201][T28163] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1082.979783][T28163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1082.987822][T28163] Bluetooth: hci2: command 0x0409 tx timeout [ 1082.987919][T28163] Bluetooth: hci3: command 0x0419 tx timeout [ 1082.992240][T28240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1083.056716][T28234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1083.058417][T28234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1083.081278][T28240] 8021q: adding VLAN 0 to HW filter on device team0 [ 1083.087596][T28165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1083.088112][T28165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1083.088622][T28165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1083.089101][T28165] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1083.089503][T28165] bridge0: port 1(bridge_slave_0) entered blocking state [ 1083.089564][T28165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1083.090453][T28165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1083.090937][T28165] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1083.091280][T28165] bridge0: port 2(bridge_slave_1) entered blocking state [ 1083.091342][T28165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1083.092242][T28165] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1083.116056][T28127] device veth0_vlan entered promiscuous mode [ 1083.117328][T28234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1083.118106][T28234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1083.118676][T28234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1083.119196][T28234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1083.121049][ T5654] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1083.121581][ T5654] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1083.147570][T28128] device veth0_macvtap entered promiscuous mode [ 1083.156785][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1083.158296][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1083.180006][T28128] device veth1_macvtap entered promiscuous mode [ 1083.191858][T28127] device veth1_vlan entered promiscuous mode [ 1083.198874][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1083.199563][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1083.200121][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1083.200632][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1083.216409][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1083.217999][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1083.218785][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1083.239379][T14557] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1083.239398][T14557] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1083.279566][T28128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1083.279585][T28128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1083.279595][T28128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1083.279605][T28128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1083.279616][T28128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1083.279627][T28128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1083.281025][T28128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1083.282893][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1083.283650][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready 01:41:12 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@vsock}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 1083.284389][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1083.285047][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1083.285571][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1083.286170][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1083.286787][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1083.304530][T28240] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1083.305238][T28240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1083.317873][T28127] device veth0_macvtap entered promiscuous mode [ 1083.326291][T28128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1083.326309][T28128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1083.326318][T28128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1083.326328][T28128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1083.326338][T28128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1083.326347][T28128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1083.328085][T28128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1083.347867][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1083.348538][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1083.349051][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1083.349659][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1083.350234][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1083.350858][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1083.357864][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1083.367954][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1083.368099][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1083.370849][T28127] device veth1_macvtap entered promiscuous mode [ 1083.392638][T14557] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1083.392638][T14557] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1083.392657][T14557] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1083.416345][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1083.420084][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1083.422962][T28127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1083.422979][T28127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1083.422988][T28127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1083.422998][T28127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1083.423006][T28127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1083.423017][T28127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1083.423025][T28127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1083.423035][T28127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1083.424480][T28127] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1083.426414][T28127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1083.426429][T28127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1083.426438][T28127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1083.426448][T28127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1083.426457][T28127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1083.426467][T28127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1083.426475][T28127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1083.426486][T28127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1083.439605][T28127] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1083.443548][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1083.444199][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1083.445995][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1083.446521][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1083.450253][T28240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1083.611356][T28128] ieee80211 phy28: Selected rate control algorithm 'minstrel_ht' [ 1083.667991][T28127] ieee80211 phy29: Selected rate control algorithm 'minstrel_ht' [ 1083.723240][T11595] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1083.723254][T11595] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1083.726059][ T5654] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1083.800656][T28128] ieee80211 phy30: Selected rate control algorithm 'minstrel_ht' [ 1083.866587][ T1279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1083.866600][ T1279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1083.870624][T28091] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1083.896423][ T1279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1083.896436][ T1279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1083.898698][T28127] ieee80211 phy31: Selected rate control algorithm 'minstrel_ht' [ 1083.983758][T28091] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1084.076675][ T1279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1084.076693][ T1279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1084.080416][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1085.058220][ T3680] Bluetooth: hci2: command 0x041b tx timeout [ 1085.480836][T28091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1085.481557][T28091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1085.531149][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1085.531767][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1085.532472][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1085.533015][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1085.542701][T28240] device veth0_vlan entered promiscuous mode [ 1085.568993][T28240] device veth1_vlan entered promiscuous mode [ 1085.636219][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1085.636962][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1085.637641][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1085.638262][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1085.650550][T28240] device veth0_macvtap entered promiscuous mode [ 1085.676450][T28240] device veth1_macvtap entered promiscuous mode [ 1085.727840][T28240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1085.727859][T28240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1085.727868][T28240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1085.727879][T28240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1085.727888][T28240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1085.727898][T28240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1085.727906][T28240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1085.727916][T28240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1085.727924][T28240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1085.727933][T28240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1085.729421][T28240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1085.729535][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1085.730157][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1085.730701][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1085.731245][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1085.736198][T28240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1085.736213][T28240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1085.736222][T28240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1085.736232][T28240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1085.736241][T28240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1085.736249][T28240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1085.736255][T28240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1085.736265][T28240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1085.736271][T28240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1085.736280][T28240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1085.746313][T28240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1085.746422][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1085.747086][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1085.860471][T28240] ieee80211 phy32: Selected rate control algorithm 'minstrel_ht' [ 1085.938428][T14559] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1085.938446][T14559] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1085.941887][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1085.950422][T28240] ieee80211 phy33: Selected rate control algorithm 'minstrel_ht' [ 1086.038379][T14559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1086.038399][T14559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1086.041803][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1087.147738][ T3686] Bluetooth: hci2: command 0x040f tx timeout [ 1087.772312][T20042] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 1087.772337][T20042] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 1087.772352][T20042] CPU: 0 PID: 20042 Comm: kworker/u4:31 Not tainted 5.19.0-rc3-syzkaller-00048-gde5c208d533a #0 [ 1087.772372][T20042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1087.772383][T20042] Workqueue: netns cleanup_net [ 1087.772482][T20042] RIP: 0010:__list_del_entry_valid+0x67/0x100 [ 1087.772533][T20042] Code: 4c 89 ff e8 5b 67 a5 fd 48 ba 00 01 00 00 00 00 ad de 4d 8b 37 49 39 d6 74 53 48 83 c2 22 48 39 d3 74 5d 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 2a 67 a5 fd 48 8b 13 4c 39 fa 75 [ 1087.772549][T20042] RSP: 0018:ffffc9000323fae8 EFLAGS: 00010246 [ 1087.772566][T20042] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8dc30260 [ 1087.772580][T20042] RDX: dead000000000122 RSI: 0000000000000008 RDI: ffff88807e8aa028 [ 1087.772594][T20042] RBP: 1ffff11008ce194a R08: dffffc0000000000 R09: fffff52000647f39 [ 1087.772606][T20042] R10: fffff52000647f39 R11: 1ffff92000647f38 R12: dffffc0000000000 [ 1087.772618][T20042] R13: ffff88807e8aa010 R14: 0000000000000000 R15: ffff88807e8aa020 [ 1087.772631][T20042] FS: 0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 1087.772646][T20042] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1087.772659][T20042] CR2: 00007f9466a328ee CR3: 000000007943e000 CR4: 00000000003506f0 [ 1087.772677][T20042] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1087.772689][T20042] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1087.772701][T20042] Call Trace: [ 1087.772707][T20042] [ 1087.772715][T20042] cttimeout_net_exit+0xba/0x270 [ 1087.772761][T20042] cleanup_net+0x758/0xc50 [ 1087.772773][T20042] ? ops_free_list+0x350/0x350 [ 1087.772785][T20042] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1087.772800][T20042] process_one_work+0x81c/0xd10 [ 1087.772849][T20042] ? worker_detach_from_pool+0x260/0x260 [ 1087.772861][T20042] ? _raw_spin_lock_irqsave+0x120/0x120 [ 1087.772872][T20042] ? kthread_data+0x4d/0xc0 [ 1087.772883][T20042] ? wq_worker_running+0x95/0x190 [ 1087.772893][T20042] worker_thread+0xb14/0x1330 [ 1087.772910][T20042] kthread+0x266/0x300 [ 1087.772920][T20042] ? rcu_lock_release+0x20/0x20 [ 1087.772930][T20042] ? kthread_blkcg+0xd0/0xd0 [ 1087.772940][T20042] ret_from_fork+0x1f/0x30 [ 1087.772960][T20042] [ 1087.772964][T20042] Modules linked in: [ 1087.775297][T20042] ---[ end trace 0000000000000000 ]--- [ 1087.775310][T20042] RIP: 0010:__list_del_entry_valid+0x67/0x100 [ 1087.775330][T20042] Code: 4c 89 ff e8 5b 67 a5 fd 48 ba 00 01 00 00 00 00 ad de 4d 8b 37 49 39 d6 74 53 48 83 c2 22 48 39 d3 74 5d 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 2a 67 a5 fd 48 8b 13 4c 39 fa 75 [ 1087.775339][T20042] RSP: 0018:ffffc9000323fae8 EFLAGS: 00010246 [ 1087.775348][T20042] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8dc30260 [ 1087.775356][T20042] RDX: dead000000000122 RSI: 0000000000000008 RDI: ffff88807e8aa028 [ 1087.775363][T20042] RBP: 1ffff11008ce194a R08: dffffc0000000000 R09: fffff52000647f39 [ 1087.775370][T20042] R10: fffff52000647f39 R11: 1ffff92000647f38 R12: dffffc0000000000 [ 1087.775378][T20042] R13: ffff88807e8aa010 R14: 0000000000000000 R15: ffff88807e8aa020 [ 1087.775384][T20042] FS: 0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 1087.775393][T20042] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1087.775400][T20042] CR2: 00007fd26a13e020 CR3: 000000007943e000 CR4: 00000000003506f0 [ 1087.775409][T20042] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1087.775415][T20042] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1087.775423][T20042] Kernel panic - not syncing: Fatal exception [ 1097.784365][T20042] Kernel Offset: disabled