"}, @assoc={0x18, 0x117, 0x4, 0x9}, @op={0x18}], 0x170, 0x4804}, {0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f00000008c0)="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", 0x1000}], 0x1, &(0x7f0000001900)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x800}, @op={0x18, 0x117, 0x3, 0x1}], 0x60, 0x24004011}, {0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000001980)="b10f89830a275ca317efa3e030fdf6e10f89b9390ad2184aef1f2148d2134beb10d435f2c48e94f739d8c245d9e08217255dd66ddb0ca463c27deb09bd564fe8d2c11c0305370136038c0543e88b1a1867a27d66b7513d8eb6f049ab4a59633ee57241b2cade272cde68a69b", 0x6c}, {&(0x7f0000001a00)="8ce8b58c77842ae0f9267ae9c5d42ed979770f51cf741d53540795421cf67d48f8670564262b90db9266a89d46fff7b294109e5ce5b027bd6c0168003d6993a3b728c98eaa66e276c2b3d4aefd3d7570f893ba903da3aabb5c15a6b93199d4f90e4a6e97852f443439c1af6437b5d65b42c315d644", 0x75}, {&(0x7f0000001a80)="edbe41f653c3990923901a89e424af7759dfb429783cdeae2d6093832a3e5246d9d80161f4020497b10120944d95c0a71d4bbc8731", 0x35}, {&(0x7f0000001ac0)="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", 0x1000}, {&(0x7f0000002ac0)="fcb0e5f62d8fa1a4ecea23da631193e21972b2dcc83e99b7217ecb6ac1ccb1d5890d0d59bb6b3f53892b027be87af45d820bfd1ec8f4d610726c4663f72dd09e20437d080568198972b7959dce29cd7d9aa67334e096ccbd59210826f536e795af28003ce7ac0eac05dfbbdbbeb8a000444cd1f100f74cbb55a1a4cd38321e44c92f469403f7ac4a09af2c8c9744bd181e53c0da7b69371d4c8009e182a4852659e1f712", 0xa4}], 0x5, &(0x7f0000002c00)=[@op={0x18}, @iv={0x38, 0x117, 0x2, 0x20, "a7672ab73e549c496d641734ec65448c7206973c6daa95ddd75f18a0dde9fa58"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x68, 0x20000000}, {0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000002c80)="ef4f2aadfd6b3587e59a89606401bc50c5a1edbe2696a92ed520d7246687d15fbda7178546894d86e3b470a47e724fd1e3f6ad8373bfb47b9753845cfb642746edfe461fa5f8e3f74625f2a6f1c589eadab41613166222867dc0cd61d2bae89ed4eefb57690bd04ada411db9f045e9777e861adfac4624f41c9d3e07ea1f3a4704aef6b868e6903f1d5ef7233c3edf8058029adb18df20a4e418c9c9b259447f81a2e8c273330810eb207c57b5cba0b3b2729856db", 0xb5}, {&(0x7f0000002d40)="ce6a48396616a3b5b605fadb7c0d3e421d6bdc9034bdbfa0394a49a336fdb10bf85c9d70bc89ed45dac50ba96a612a96a0ff2de1ce1d4e14e131c0f8021aa6cff041758ffeb063a4f055528569c31ce64004dbfc35bfce193e8c0502fe9f12b897350fa7e4fa7d0c8f3673c54fdeb4801cff8d0b3ed4f775ee8744f822b31d907cbfabc06ff7082c9823d3cf6462e58af3725e971a8033082333f6e7cc5901b554a7c69fa0a5506ac5a2254d88f67ce1bcd407057b5520d232941b629c66f508", 0xc0}, {&(0x7f0000002e00)="f9cd1ebe8e742e6c110d3be7c8e006c1186afbb21d617760d281a68047619b2961e509efb40a6610f397831e742e0f1b45b22d4da1018ca0068a670a19825866e04ee39c3fd4f5f0a05b443f2a338600e6088fe4214f5c792fbc13dafc9b3e7302856ba55450614a868be20b5e10d818782e752aed8a2797fda961aee6ec42a3fb19013c92de107854fcfac7f1d89f6e0126426d7bc344152c00d2fb3a32c10dbd7fda45f4731f83173f5987599256b3196ce91b2573b9eeb119eb2721e5343479718361697c85c4b1a3b891f4ef945f88aa695033aab3168e9e14339ad7ad41f767e63522584ee1f35202e1e750", 0xee}], 0x3, &(0x7f0000002f40)=[@iv={0x110, 0x117, 0x2, 0xf6, "160cb2604be33125520193f86e8c4db5dd794a1962ece9ecd8bcfbff6c6c1cf0a28521b2dfd0c2b77f1c6563bc7d91429f1ba79606cb649dc66d53421a276ef4ca6920792656b90a9c35fb71edff9bcb228ffde409125bb2e45ba0115726385a1ac6efd49de77f385cc8718dea0542d7e8cf4515e1164c53f85a9362af4064ebfd57ea3d6365ac87f076d9a2cbd172f4ac9073e90a30b2729906699959c6b9b5ef057666537b9dbb955c21d9d418caf82380be1f923a3f1418a50f51417b3e7b7e3fbdc3b915f16480b52fc670a3592ff5ea7f6358134381c72012150297bf98429b3c7ec7cc4a87813664235d390d0d4188fc398052"}, @assoc={0x18, 0x117, 0x4, 0xd65}, @iv={0x88, 0x117, 0x2, 0x74, "af5e50df9364ba781c5f85ec261e69854c7f77af2a98b242518f9f374384c3a365be423c160979689768bb6e63754989c658f11642b54caaf17afd7e3db19a65d3118e635fcc1af26e33f3e3bf78d9b96c8e6d021dd29bc6703c01ec421f6dfeb6ab60806f08633c3f499ade76e5c6ce493200e1"}, @iv={0x60, 0x117, 0x2, 0x48, "1963898af7e6b85f3960301896879694b49483f448b93019f56368ded4e78420b5ff911e54f81e13f638307a74723bcbf4f16d4ae83c62f889e4f617c297bbc8ee1c5c07e164fceb"}, @assoc={0x18, 0x117, 0x4, 0x400}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x258, 0x20000000}, {0x0, 0x0, &(0x7f00000031c0), 0x0, &(0x7f0000003200)=[@iv={0xe8, 0x117, 0x2, 0xce, "47ba1d817c0db9c22a6e0ac40d2f04d451765313917bc1933b5f21a5664aa0a789d1859e2939524df52d35ab702951fc2b7393327590381bbd4dced079f2d64143dd3f3b30909a51ba9777850910baa4ed3f29296fe6f4a7fd69fdf7f166d7b4a9f33cdde78f2a754f24583371656473d3f2b3b405e16540b36ad1755e9441b68ee56bcdd9513443259d5969ab8e3af7fde748d00d4c695ce01f373eb506fb66874bf0fb12d1a3904e657fc645078929587ae0f736e4fb255d0107d69e1cb7adfa8215dd8e348df12055b1717f1d"}, @assoc={0x18, 0x117, 0x4, 0x3}], 0x100, 0xeeaca73a6a0205a0}, {0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000003300)="02c57020977dbf78b893ff41d0179060a9470d243ce4bb8d94da0328f80c9643bac8523b981deab61ceda9fb2311c64efa997967da7ad82d068cadbf2b5b31d7a31ed3e9b9c357edb9670c187d299880fa797e1498cb098fa530637867669a3c86edeb67cc7a6a3156ec8b819c9b737d95411d4c05372e5ca29344d41c19dbaa8d88a1cf52e6897ca7f03c307c2934ce21552a74e5", 0x95}, {&(0x7f00000033c0)="755d394a25e9eed703aa289b64e783500493994520b9d0ca576284b2aa3bdb64e27c04eae686762cf9a0ee12fd9b63a58b0d2356e3c57888f3ad197c44ef4da3e1115487f03b40e07c4483b8238e2b8c6f5a96b11518cb34faba5e949066661083dfac0729b79092b25ec13d5dc2f74e549daa9433605f702fe13b55e665c6f1789a6cce8ae97b19eba12ec6837545eca62b629abcaca11938038282548d815294f0d42d1bd911586c4f92987ad0b309a77bfee88b204d9f218c5a36e243a84d057bffc8e16c45f588dcde7b00e04a037c81d678b418bdb34e5d9a0bfa9859f575a588acd111f441258927ec93c054b0", 0xf0}, {&(0x7f00000034c0)="06ff8b239fb7bc8c7621c9399d0d22b2d06bdc4bd9346bf6d2fdb67ad01aafaf8640531f99472cfc24c7d87bb5c694cbb4036d88a1434938c6f6877b1695731755a47efdfc36095a92003dc4", 0x4c}, {&(0x7f0000003540)="01cb534cc270795a84cd25382c2a8a703cc9d715937451e1a9f78c1642df9250bfd6657fe941938efb142376d133ead513f02cc611fa3d4098b93b440bc85ca006067553989e2636dca2dc3255c1034a3dfc1def68415ff22a571efe563c228a2787f8bdb377b855bb2f7cd7a35ee1c97e", 0x71}, {&(0x7f00000035c0)="8a82d78a3f57d91ec4cf43344b2208b2b6506492adf1b3a1bb60e004bdcfe071cdee3c96001b60bb6edfde80a9ce844a5c787ca0983229e44e76e21ea0abbd975fefdb9ff101666cee5b3c856f78623062c7bd8ba6463a79b6f3041a3b2ff9045c4653b37f8f9d07461f007d2717ecda90", 0x71}, {&(0x7f0000003640)="93c99f3109d2a25116685076eb1de261953efd25e41ea9d948346f7f298b84d8d9ad7989b96b7e51a17ef5881ae4c6a4ce6ac2", 0x33}, {&(0x7f0000003680)="87c4bb62b3c5ec961e7a7d0ede0f6646722b96e090354940a31841a650fedab4b0eebffa76a3f30a9a2c5396549ee996d580f6e9cceedb8c4b40b221922ad636d358d12e375ed0e586e3ab4ee6498ac596b93b3ca0c4f2ae3216ea4b95e3e8273e8dd1a77ddf043de099c89c1ad16d196cedc97e836722e531a0e894577a9234fb4dd348b85b8bb8906b5c8490a5a8140b411b667b2664947cfe23edc0aa37e366b7", 0xa2}], 0x7, &(0x7f00000037c0)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x5}, @iv={0x50, 0x117, 0x2, 0x3a, "6dfb99afcf845418c28889e2c6bb6f03e31d9c3ff9e522312e806fe80bc3a0d6f5dc2faa8edf03213f8e61f9267e772afde77945b811a7094d29"}, @assoc={0x18, 0x117, 0x4, 0xff}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}], 0xf8, 0x44041}], 0x7, 0x20042800) bind$rose(r0, 0x0, 0x0) 20:34:16 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab", 0x3a, 0x44070, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) 20:34:16 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:34:16 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0xf0ffffff}, 0x0) 20:34:16 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) sendfile(r2, r1, 0x0, 0x8000000000004) sendto$packet(r1, &(0x7f0000000080)="2be80b2e201d67a3fa5dcc5811efe210e2ba02b5f6a3c800e9916831d663800561fe0bc53f9c959a8f272f67491a2c409976e76f70777ec74ee631bb9b7a99cf6e348d82e751d285d0301f714e30c7124470a1bf7c5f4f4571e853b31e161ca4d466209ee86a842c418b137b22409e75b3b5d18bf9cc59ed02e1fd13ed7332b7e1045f9561500466ff0bf56527988c4275eca53b0ecc85f0672c7f889a233f30005bbf8730946d8b486ced78", 0xac, 0x4000, 0x0, 0x0) bind$rose(r0, 0x0, 0x0) [ 647.415601][T25314] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 647.432887][T25314] device macsec1 entered promiscuous mode [ 647.439248][T25314] device vlan0 entered promiscuous mode [ 647.450757][T25314] device vlan0 left promiscuous mode 20:34:16 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab", 0x3a, 0x44070, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) 20:34:16 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x10}}, 0x0) 20:34:16 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0xfffffdef}, 0x0) 20:34:16 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b", 0x44, 0x44070, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) 20:34:16 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020a000007000000000020000000854105001a002000000000d74419ed6d07da9524429a0000000000005100aad5751e540000010a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = socket(0xa, 0x1, 0x0) close(r4) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000000)={r6}, 0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000080)={r6, 0x100}, &(0x7f00000000c0)=0x8) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 20:34:16 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0xffffff7f}, 0x0) 20:34:17 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth1_virt_wifi\x00', 0x0}) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) r1 = socket(0x40000000015, 0x0, 0x0) setsockopt$rose(r1, 0x104, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000db4ff0)={0x2, 0x0, @loopback=0xac14140d}, 0x10) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4a128c1aa7cf68a72e18b043723262ef1db17855e9b9c3c4f3d85375cfa53566d1bccb85f7297cb07953a21aa4f222f0b3883bb31e8a8f15e68f55716d40aae2130362bc729067a2c18ab1d030fec56022b3ed49a32965d048e33836476967ed3c42524afa00cc95b8b1bd067d02f67da010df77addc64711eb3b771464ded7467a586a825be4a7edbb278663c325af5e83e40a3b1b721b5fd06c0500279e00f3b4768d6ebe10ee02f6b2e7f55de781d27c9588c2cc3bb100589391f51e", @ANYRES32], 0x50}}, 0x0) 20:34:17 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b", 0x44, 0x44070, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) 20:34:17 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0xffffff8d}, 0x0) 20:34:17 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:34:17 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b", 0x44, 0x44070, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) [ 648.418069][T25350] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 20:34:17 executing program 2: connect$rose(0xffffffffffffffff, &(0x7f0000000000)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @default}, 0x1c) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000040)={{}, 0xc78, 0x9, 0x9}) r0 = socket$key(0xf, 0x3, 0x2) ioctl$sock_netdev_private(r0, 0x89f6, &(0x7f0000000080)) socket(0x22, 0x6, 0x80) bind$rose(0xffffffffffffffff, 0x0, 0x0) 20:34:17 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0xfffffff0}, 0x0) [ 648.505939][T25350] device macsec1 entered promiscuous mode [ 648.511817][T25350] device vlan0 entered promiscuous mode [ 648.554784][T25350] device vlan0 left promiscuous mode 20:34:17 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf74", 0x49, 0x44070, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) 20:34:17 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x7ffffffff000}, 0x0) 20:34:17 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf74", 0x49, 0x44070, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) 20:34:18 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020a000007000000000020000000854105001a002000000000d74419ed6d07da9524429a0000000000005100aad5751e540000010a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = socket(0xa, 0x1, 0x0) close(r4) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000000)={r6}, 0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000080)={r6, 0x100}, &(0x7f00000000c0)=0x8) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 20:34:18 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf74", 0x49, 0x44070, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) 20:34:18 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth1_virt_wifi\x00', 0x0}) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) r1 = socket(0x40000000015, 0x0, 0x0) setsockopt$rose(r1, 0x104, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000db4ff0)={0x2, 0x0, @loopback=0xac14140d}, 0x10) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:34:18 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0xf0ff7f00000000}, 0x0) 20:34:18 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec", 0x4b, 0x44070, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) 20:34:18 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:34:18 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r1, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) bind$rose(r1, 0x0, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r2, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0x8000000000004) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x80000001, 0x0, {0x0, 0x0, 0x0, r7, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x40}}, 0x24) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000000)={@local, 0x7a, r7}) bind$rose(r2, 0x0, 0x0) bind$rose(r2, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r8, 0xffffffffffffffff, 0x0, 0x8000000000004) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7f}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r4}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x6001000}, 0x0) 20:34:18 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec", 0x4b, 0x44070, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) 20:34:18 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0xf0ffffff7f0000}, 0x0) 20:34:18 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec", 0x4b, 0x44070, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) [ 649.554494][T25395] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 649.590837][T25395] device macsec1 entered promiscuous mode 20:34:18 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x100000000000000}, 0x0) [ 649.607477][T25395] device vlan0 entered promiscuous mode [ 649.643796][T25395] device vlan0 left promiscuous mode 20:34:18 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66", 0x4c, 0x44070, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) 20:34:19 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020a000007000000000020000000854105001a002000000000d74419ed6d07da9524429a0000000000005100aad5751e540000010a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = socket(0xa, 0x1, 0x0) close(r4) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000000)={r6}, 0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000080)={r6, 0x100}, &(0x7f00000000c0)=0x8) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 20:34:19 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x300000000000000}, 0x0) 20:34:19 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth1_virt_wifi\x00', 0x0}) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) r1 = socket(0x40000000015, 0x0, 0x0) setsockopt$rose(r1, 0x104, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000db4ff0)={0x2, 0x0, @loopback=0xac14140d}, 0x10) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:34:19 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66", 0x4c, 0x44070, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) 20:34:19 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x700000000000000}, 0x0) 20:34:19 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002ac0)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000002bc0)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002b80)={&(0x7f0000002b00)={0x44, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x100}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000004) r6 = gettid() syz_open_procfs$namespace(r6, 0xfffffffffffffffe) syz_open_procfs$namespace(r6, &(0x7f0000000040)='ns/ipc\x00') syz_open_procfs$namespace(r6, 0x0) ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f0000000000)=r6) sendfile(r2, r1, 0x0, 0x8000000000004) ioctl$SIOCX25GCALLUSERDATA(r1, 0x89e4, &(0x7f00000000c0)={0x1e, "33d33605cc707ee8e4c561682e2f5bc102bf64fbeeec6727b4b042097e657d03c0f70a7351e90dc74ca3b37f856bd388f3fdb67380db88a3e2e9c8bab0a9908b239e67925bd974e133903b7b04cf2be12f496b30bd78ecb3b03c4ca34c67fc32ad0bd553a869681d9d081dbea4bf13a39d1a8617f4ea928810cd047bb83be1f5"}) preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000240)=""/217, 0xd9}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/135, 0x87}, {&(0x7f0000001400)=""/139, 0x8b}, {&(0x7f00000014c0)=""/181, 0xb5}, {&(0x7f0000001580)=""/144, 0x90}], 0x6, 0xf8) bind$rose(r0, 0x0, 0x0) 20:34:19 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:34:19 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x1000000000000000}, 0x0) 20:34:19 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66", 0x4c, 0x44070, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) [ 650.752492][T25433] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 650.817451][T25433] device macsec1 entered promiscuous mode [ 650.853302][T25433] device vlan0 entered promiscuous mode 20:34:20 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x8dffffff00000000}, 0x0) [ 650.912738][T25433] device vlan0 left promiscuous mode 20:34:20 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x4d, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) 20:34:20 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66", 0x4c, 0x44070, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) 20:34:20 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0xeffdffff00000000}, 0x0) 20:34:20 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x4d, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) 20:34:20 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth1_virt_wifi\x00', 0x0}) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) r1 = socket(0x40000000015, 0x0, 0x0) setsockopt$rose(r1, 0x104, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000db4ff0)={0x2, 0x0, @loopback=0xac14140d}, 0x10) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:34:20 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x4d, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) 20:34:20 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0xf0ffffff00000000}, 0x0) 20:34:20 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66", 0x4c, 0x44070, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) 20:34:20 executing program 4: bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r1 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r1, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000380)={0xffffffffffffffff, r0}) sendmsg$rds(r1, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:34:20 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200094}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000071a5e71bfa06885dc3dce06619093d2d4453fb28e8b518b639ce74c12b38642145467e3b744638b1f7e1dc1c82fedd726f89e600bf2bd3c52a644ef9b286adf5895e5371953cae3176bbc4c59d6a61353c2c5a9d87788058402cff6a7fcf914d6cdd10f545b00b25be8ba8879a79", @ANYRES16=r2, @ANYBLOB="000227bd7000fcdbdfc358b34305b0d6806edebf8165444cb225"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) bind$rose(r0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket(0xa, 0x1, 0x0) close(r5) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendfile(0xffffffffffffffff, r8, 0x0, 0xf03b0000) bind$inet(r8, &(0x7f00000002c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000000)={r7}, 0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000100)={r7}, &(0x7f0000000280)=0x8) 20:34:20 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x7fffffff, 0x0) 20:34:21 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0xffffff7f00000000}, 0x0) [ 651.860160][T25472] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 20:34:21 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66", 0x4c, 0x44070, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) 20:34:21 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) bind$rose(r0, 0x0, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r1, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) bind$rose(r1, 0x0, 0x0) bind$rose(r1, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x0, [@bcast, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}, 0x40) [ 651.907123][T25472] device macsec1 entered promiscuous mode [ 651.923459][T25472] device vlan0 entered promiscuous mode [ 651.936311][T25472] device vlan0 left promiscuous mode 20:34:21 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x7fffffff, 0x0) 20:34:21 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x1000000000000000}, 0x0) 20:34:21 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth1_virt_wifi\x00', 0x0}) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) r1 = socket(0x40000000015, 0x0, 0x0) setsockopt$rose(r1, 0x104, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000db4ff0)={0x2, 0x0, @loopback=0xac14140d}, 0x10) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:34:21 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x3}, 0x0) 20:34:21 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x7fffffff, 0x0) 20:34:21 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) bind$rose(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) sendfile(r2, r1, 0x0, 0x8000000000004) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) 20:34:21 executing program 4: bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r1 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r1, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000380)={0xffffffffffffffff, r0}) sendmsg$rds(r1, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:34:21 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) sendfile(r0, r1, 0x0, 0xf03b0000) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x3, 0x3, 0x9}) 20:34:21 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x7}, 0x0) 20:34:21 executing program 5: pipe(&(0x7f0000000380)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x7fffffff, 0x0) 20:34:21 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth1_virt_wifi\x00', 0x0}) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) r1 = socket(0x40000000015, 0x0, 0x0) setsockopt$rose(r1, 0x104, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000db4ff0)={0x2, 0x0, @loopback=0xac14140d}, 0x10) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:34:21 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x10}, 0x0) 20:34:21 executing program 5: pipe(&(0x7f0000000380)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x7fffffff, 0x0) 20:34:21 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth1_virt_wifi\x00', 0x0}) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) r1 = socket(0x40000000015, 0x0, 0x0) setsockopt$rose(r1, 0x104, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000db4ff0)={0x2, 0x0, @loopback=0xac14140d}, 0x10) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:34:22 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x300}, 0x0) 20:34:22 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth1_virt_wifi\x00', 0x0}) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) r1 = socket(0x40000000015, 0x0, 0x0) setsockopt$rose(r1, 0x104, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000db4ff0)={0x2, 0x0, @loopback=0xac14140d}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:34:22 executing program 5: pipe(&(0x7f0000000380)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x7fffffff, 0x0) [ 653.069431][T25530] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 653.137170][T25530] device macsec1 entered promiscuous mode [ 653.172957][T25530] device vlan0 entered promiscuous mode [ 653.189854][T25530] device vlan0 left promiscuous mode 20:34:22 executing program 2: setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0xfffffffe, @private1={0xfc, 0x1, [], 0x1}, 0x1c2c9f57}], 0x1c) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @bcast}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e20, @private=0xa010102}, @in={0x2, 0x4e22, @multicast2}], 0x20) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r3, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x7, 0x3, 0x800}) bind$rose(r0, 0x0, 0x0) 20:34:22 executing program 4: bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r1 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r1, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000380)={0xffffffffffffffff, r0}) sendmsg$rds(r1, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:34:22 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) sendfile(r0, r1, 0x0, 0xf03b0000) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x3, 0x3, 0x9}) 20:34:22 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x700}, 0x0) 20:34:22 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x0, 0x0) 20:34:22 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x0, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @null]}, 0x40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x8000000000004) openat$cgroup_ro(r2, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x0, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r3, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) bind$rose(r3, 0x0, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r4, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) bind$rose(r4, 0x0, 0x0) accept4$rose(r4, 0x0, &(0x7f00000000c0), 0x100800) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r5, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) bind$rose(r5, 0x0, 0x0) accept4(r5, &(0x7f0000000400)=@isdn, &(0x7f0000000480)=0x80, 0x180800) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r6, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) bind$rose(0xffffffffffffffff, 0x0, 0xfffffffffffffce9) 20:34:22 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x0, 0x0) 20:34:22 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0xf0ff7f}, 0x0) 20:34:22 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth1_virt_wifi\x00', 0x0}) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) r1 = socket(0x40000000015, 0x0, 0x0) setsockopt$rose(r1, 0x104, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:34:22 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @bcast}, 0x1c) bind$rose(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) sendfile(r2, r1, 0x0, 0x8000000000004) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000000)={0x1ed}, 0x4) 20:34:22 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x0, 0x0) 20:34:23 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x1000000}, 0x0) [ 653.857055][T25564] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 653.908654][T25564] device macsec1 entered promiscuous mode [ 653.944415][T25564] device vlan0 entered promiscuous mode 20:34:23 executing program 5: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x0, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @null]}, 0x40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x8000000000004) openat$cgroup_ro(r2, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x0, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r3, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) bind$rose(r3, 0x0, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r4, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) bind$rose(r4, 0x0, 0x0) accept4$rose(r4, 0x0, &(0x7f00000000c0), 0x100800) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r5, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) bind$rose(r5, 0x0, 0x0) accept4(r5, &(0x7f0000000400)=@isdn, &(0x7f0000000480)=0x80, 0x180800) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r6, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) bind$rose(0xffffffffffffffff, 0x0, 0xfffffffffffffce9) [ 653.979176][T25564] device vlan0 left promiscuous mode 20:34:23 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:34:23 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth1_virt_wifi\x00', 0x0}) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) r1 = socket(0x40000000015, 0x0, 0x0) setsockopt$rose(r1, 0x104, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000db4ff0)={0x2, 0x0, @loopback=0xac14140d}, 0x10) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4a128c1aa7cf68a72e18b043723262ef1db17855e9b9c3c4f3d85375cfa53566d1bccb85f7297cb07953a21aa4f222f0b3883bb31e8a8f15e68f55716d40aae2130362bc729067a2c18ab1d030fec56022b3ed49a32965d048e33836476967ed3c42524afa00cc95b8b1bd067d02f67da010df77addc64711eb3b771464ded7467a586a825be4a7edbb278663c325af5e83e40a3b1b721b5fd06c0500279e00f3b4768d6ebe10ee02f6b2e7f55de781d27c9588c2cc3bb100589391f51e", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:34:23 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x3000000}, 0x0) 20:34:23 executing program 5: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) bind$rose(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) sendfile(r2, r1, 0x0, 0x8000000000004) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) 20:34:23 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth1_virt_wifi\x00', 0x0}) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) socket(0x40000000015, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4a128c1aa7cf68a72e18b043723262ef1db17855e9b9c3c4f3d85375cfa53566d1bccb85f7297cb07953a21aa4f222f0b3883bb31e8a8f15e68f55716d40aae2130362bc729067a2c18ab1d030fec56022b3ed49a32965d048e33836476967ed3c42524afa00cc95b8b1bd067d02f67da010df77addc64711eb3b771464ded7467a586a825be4a7edbb278663c325af5e83e40a3b1b721b5fd06c0500279e00f3b4768d6ebe10ee02f6b2e7f55de781d27c9588c2cc3bb100589391f51e", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:34:23 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x7000000}, 0x0) 20:34:23 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x8000000000004) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000)=0x40, 0x4) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r3, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) bind$rose(r3, 0x0, 0x0) 20:34:24 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x10000000}, 0x0) [ 654.830507][T25598] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 654.860170][T25598] device macsec1 entered promiscuous mode [ 654.873338][T25598] device vlan0 entered promiscuous mode [ 654.899773][T25598] device vlan0 left promiscuous mode 20:34:24 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x7ffff000}, 0x0) 20:34:24 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x8dffffff}, 0x0) 20:34:24 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) [ 655.413625][T25599] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 20:34:24 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0xeffdffff}, 0x0) [ 655.468184][T25599] device macsec1 entered promiscuous mode [ 655.502722][T25599] device vlan0 entered promiscuous mode [ 655.560944][T25599] device vlan0 left promiscuous mode 20:34:24 executing program 5 (fault-call:5 fault-nth:0): pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) [ 655.829071][T25628] FAULT_INJECTION: forcing a failure. [ 655.829071][T25628] name failslab, interval 1, probability 0, space 0, times 0 [ 655.842366][T25628] CPU: 0 PID: 25628 Comm: syz-executor.5 Not tainted 5.7.0-rc5-syzkaller #0 [ 655.851059][T25628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 655.861125][T25628] Call Trace: [ 655.864433][T25628] dump_stack+0x188/0x20d [ 655.868777][T25628] should_fail.cold+0x5/0xa [ 655.873332][T25628] ? tcp_splice_read+0x210/0xb50 [ 655.878282][T25628] ? fault_create_debugfs_attr+0x140/0x140 [ 655.884147][T25628] ? __x64_sys_splice+0x198/0x250 [ 655.889177][T25628] ? do_syscall_64+0xf6/0x7d0 [ 655.893865][T25628] should_failslab+0x5/0xf [ 655.898737][T25628] kmem_cache_alloc_node+0x55/0x760 [ 655.903971][T25628] ? print_usage_bug+0x240/0x240 [ 655.909014][T25628] ? lock_release+0x800/0x800 [ 655.913716][T25628] ? lock_downgrade+0x840/0x840 [ 655.918574][T25628] __alloc_skb+0xba/0x5a0 [ 655.922916][T25628] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 655.928464][T25628] ? ktime_get+0xff/0x2f0 [ 655.932796][T25628] ? lockdep_hardirqs_on+0x463/0x620 [ 655.938079][T25628] ? ktime_get+0x1f8/0x2f0 [ 655.942527][T25628] __tcp_send_ack.part.0+0x67/0x5a0 [ 655.947724][T25628] ? __tcp_select_window+0x323/0x890 [ 655.953178][T25628] tcp_send_ack+0x7d/0xa0 [ 655.957605][T25628] tcp_cleanup_rbuf+0x1c3/0x5f0 [ 655.962490][T25628] tcp_read_sock+0x68f/0x9e0 [ 655.967097][T25628] ? tcp_init_sock+0x920/0x920 [ 655.972012][T25628] ? compat_tcp_getsockopt+0x80/0x80 [ 655.977437][T25628] ? __local_bh_enable_ip+0x159/0x270 [ 655.983026][T25628] tcp_splice_read+0x210/0xb50 [ 655.987991][T25628] ? tcp_read_sock+0x9e0/0x9e0 [ 655.993082][T25628] ? fsnotify_first_mark+0x200/0x200 [ 655.998425][T25628] ? security_file_permission+0x8c/0x470 [ 656.004363][T25628] sock_splice_read+0xb6/0x120 [ 656.009144][T25628] ? tcp_read_sock+0x9e0/0x9e0 [ 656.013933][T25628] ? kernel_sock_shutdown+0x70/0x70 [ 656.023417][T25628] do_splice_to+0x114/0x160 [ 656.027918][T25628] do_splice+0x1234/0x1520 [ 656.032368][T25628] ? ksys_dup3+0x3c0/0x3c0 [ 656.036913][T25628] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 656.042904][T25628] ? default_file_splice_write+0x90/0x90 [ 656.048541][T25628] ? fput_many+0x2f/0x1a0 [ 656.052897][T25628] __x64_sys_splice+0x198/0x250 [ 656.057784][T25628] do_syscall_64+0xf6/0x7d0 [ 656.062306][T25628] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 656.068313][T25628] RIP: 0033:0x45ca29 [ 656.072338][T25628] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 656.092106][T25628] RSP: 002b:00007ff1120c8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 656.100595][T25628] RAX: ffffffffffffffda RBX: 00000000005079c0 RCX: 000000000045ca29 [ 656.108576][T25628] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 656.116885][T25628] RBP: 000000000078bf00 R08: 000000007fffffff R09: 0000000000000000 [ 656.125099][T25628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 656.133083][T25628] R13: 0000000000000bae R14: 00000000004ce9f7 R15: 00007ff1120c96d4 20:34:25 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth1_virt_wifi\x00', 0x0}) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) r1 = socket(0x40000000015, 0x0, 0x0) setsockopt$rose(r1, 0x104, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000db4ff0)={0x2, 0x0, @loopback=0xac14140d}, 0x10) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:34:25 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0xf0ffffff}, 0x0) 20:34:25 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x15) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x3, 0x8, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1c}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0xc001) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) bind$rose(r0, 0x0, 0x0) 20:34:25 executing program 5 (fault-call:5 fault-nth:1): pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) 20:34:25 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:34:25 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth1_virt_wifi\x00', 0x0}) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) socket(0x40000000015, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 656.678421][T25642] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 656.711356][T25642] device macsec1 entered promiscuous mode [ 656.719404][T25642] device vlan0 entered promiscuous mode 20:34:25 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0xfffffdef}, 0x0) 20:34:25 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="c2abab65879edce8c3aa38f9ca20fbbc", 0x10) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r3, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, &(0x7f0000000200), &(0x7f0000000240)=0x4) bind$rose(r3, 0x0, 0x0) [ 656.721836][T25643] FAULT_INJECTION: forcing a failure. [ 656.721836][T25643] name failslab, interval 1, probability 0, space 0, times 0 [ 656.739975][T25642] device vlan0 left promiscuous mode [ 656.762797][T25643] CPU: 0 PID: 25643 Comm: syz-executor.5 Not tainted 5.7.0-rc5-syzkaller #0 [ 656.771638][T25643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 656.781876][T25643] Call Trace: [ 656.785191][T25643] dump_stack+0x188/0x20d [ 656.789545][T25643] should_fail.cold+0x5/0xa [ 656.794074][T25643] ? fault_create_debugfs_attr+0x140/0x140 [ 656.799998][T25643] should_failslab+0x5/0xf [ 656.804422][T25643] kmem_cache_alloc_node_trace+0x59/0x790 [ 656.810154][T25643] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 656.816154][T25643] ? kmem_cache_alloc_node+0x222/0x760 [ 656.821628][T25643] __kmalloc_node_track_caller+0x38/0x60 [ 656.827453][T25643] __kmalloc_reserve.isra.0+0x39/0xe0 [ 656.832866][T25643] __alloc_skb+0xef/0x5a0 [ 656.837339][T25643] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 656.843502][T25643] ? ktime_get+0xff/0x2f0 [ 656.847844][T25643] ? lockdep_hardirqs_on+0x463/0x620 [ 656.853138][T25643] ? ktime_get+0x1f8/0x2f0 [ 656.857587][T25643] __tcp_send_ack.part.0+0x67/0x5a0 [ 656.862785][T25643] ? __tcp_select_window+0x323/0x890 [ 656.868120][T25643] tcp_send_ack+0x7d/0xa0 [ 656.872454][T25643] tcp_cleanup_rbuf+0x1c3/0x5f0 [ 656.877316][T25643] tcp_read_sock+0x68f/0x9e0 [ 656.881915][T25643] ? tcp_init_sock+0x920/0x920 [ 656.886689][T25643] ? compat_tcp_getsockopt+0x80/0x80 [ 656.892016][T25643] ? __local_bh_enable_ip+0x159/0x270 [ 656.897412][T25643] tcp_splice_read+0x210/0xb50 [ 656.902194][T25643] ? tcp_read_sock+0x9e0/0x9e0 [ 656.906968][T25643] ? fsnotify_first_mark+0x200/0x200 [ 656.912286][T25643] ? security_file_permission+0x8c/0x470 [ 656.917943][T25643] sock_splice_read+0xb6/0x120 [ 656.922736][T25643] ? tcp_read_sock+0x9e0/0x9e0 [ 656.927507][T25643] ? kernel_sock_shutdown+0x70/0x70 [ 656.932721][T25643] do_splice_to+0x114/0x160 [ 656.937236][T25643] do_splice+0x1234/0x1520 [ 656.941686][T25643] ? ksys_dup3+0x3c0/0x3c0 [ 656.946207][T25643] ? default_file_splice_write+0x90/0x90 [ 656.951853][T25643] ? fput_many+0x2f/0x1a0 [ 656.956218][T25643] __x64_sys_splice+0x198/0x250 [ 656.961087][T25643] do_syscall_64+0xf6/0x7d0 [ 656.965609][T25643] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 656.971581][T25643] RIP: 0033:0x45ca29 [ 656.975494][T25643] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 656.995111][T25643] RSP: 002b:00007ff1120c8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 657.003536][T25643] RAX: ffffffffffffffda RBX: 00000000005079c0 RCX: 000000000045ca29 [ 657.011551][T25643] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 657.019584][T25643] RBP: 000000000078bf00 R08: 000000007fffffff R09: 0000000000000000 20:34:26 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r1, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000000000)={0x7, 'gre0\x00', {0x9e}, 0x90}) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) bind$rose(r0, 0x0, 0x0) [ 657.027572][T25643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 657.035572][T25643] R13: 0000000000000bae R14: 00000000004ce9f7 R15: 00007ff1120c96d4 20:34:26 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0xffffff7f}, 0x0) 20:34:26 executing program 5 (fault-call:5 fault-nth:2): pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) 20:34:26 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0xffffff8d}, 0x0) [ 657.150339][T25644] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 657.201224][T25644] device macsec1 entered promiscuous mode [ 657.228140][T25644] device vlan0 entered promiscuous mode [ 657.249823][T25644] device vlan0 left promiscuous mode 20:34:26 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth1_virt_wifi\x00', 0x0}) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) r1 = socket(0x40000000015, 0x0, 0x0) setsockopt$rose(r1, 0x104, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000db4ff0)={0x2, 0x0, @loopback=0xac14140d}, 0x10) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:34:26 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) 20:34:26 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0xfffffff0}, 0x0) 20:34:26 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:34:26 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) bind$rose(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r1, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x200, 0x70bd2b, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x2) 20:34:26 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth1_virt_wifi\x00', 0x0}) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) socket(0x40000000015, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 657.741801][T25682] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 20:34:26 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x7ffffffff000}, 0x0) 20:34:26 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0xa, 0x0) 20:34:26 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @bcast}, 0x1c) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000300)="080db5055e0bcfe847a071") readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)=""/52, 0x34}, {&(0x7f00000000c0)=""/172, 0xac}, {&(0x7f0000000040)=""/19, 0x13}, {&(0x7f0000000180)=""/218, 0xda}], 0x4) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r1, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) bind$rose(r1, 0x0, 0x0) connect$rose(r1, &(0x7f0000000340)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @default, @default]}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000380)={r2}) recvfrom$phonet(r5, &(0x7f00000003c0)=""/29, 0x1d, 0x2020, 0x0, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") ioctl$int_in(r2, 0x5421, &(0x7f00000002c0)=0x2) bind$rose(r0, 0x0, 0x0) [ 657.790795][T25682] device macsec1 entered promiscuous mode [ 657.814603][T25682] device vlan0 entered promiscuous mode [ 657.843654][T25682] device vlan0 left promiscuous mode 20:34:27 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fff0034, 0x0) 20:34:27 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0xf0ff7f00000000}, 0x0) 20:34:27 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fff3400, 0x0) [ 658.219155][T25689] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 658.235195][T25689] device macsec1 entered promiscuous mode [ 658.240954][T25689] device vlan0 entered promiscuous mode [ 658.250457][T25689] device vlan0 left promiscuous mode 20:34:27 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:34:27 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0xf0ffffff7f0000}, 0x0) 20:34:27 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fff3480, 0x0) 20:34:27 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) r1 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0x60, 0x80800) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0xe0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x6, 0x1}, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x80000000, 0x345d}, &(0x7f0000000240)=0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=0xd0d}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x10, &(0x7f0000000500)={&(0x7f0000000300)=""/163, 0xa3, r3}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r3, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r4, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) ioctl(r4, 0x0, &(0x7f0000000100)="080db5055e0bcfe847a071") ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', r5}) bind$rose(r0, 0x0, 0x0) 20:34:27 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:34:27 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth1_virt_wifi\x00', 0x0}) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4a128c1aa7cf68a72e18b043723262ef1db17855e9b9c3c4f3d85375cfa53566d1bccb85f7297cb07953a21aa4f222f0b3883bb31e8a8f15e68f55716d40aae2130362bc729067a2c18ab1d030fec56022b3ed49a32965d048e33836476967ed3c42524afa00cc95b8b1bd067d02f67da010df77addc64711eb3b771464ded7467a586a825be4a7edbb278663c325af5e83e40a3b1b721b5fd06c0500279e00f3b4768d6ebe10ee02f6b2e7f55de781d27c9588c2cc3bb100589391f51e", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 658.699181][T25721] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 20:34:27 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x100000000000000}, 0x0) [ 658.750454][T25721] device macsec1 entered promiscuous mode [ 658.772542][T25721] device vlan0 entered promiscuous mode 20:34:27 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) bind$rose(r0, 0x0, 0x0) r1 = socket(0x13391d1218d71060, 0x6, 0xd00) setsockopt$rose(r1, 0x104, 0x1, &(0x7f00000000c0)=0x9, 0x4) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r2, &(0x7f0000000080)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) bind$rose(r2, 0x0, 0x0) getsockopt$rose(r2, 0x104, 0x6, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 658.808397][T25721] device vlan0 left promiscuous mode 20:34:28 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fff8034, 0x0) 20:34:28 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x300000000000000}, 0x0) 20:34:28 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x40) bind$rose(r0, 0x0, 0x0) 20:34:28 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x700000000000000}, 0x0) 20:34:28 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) r1 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0x60, 0x80800) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0xe0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x6, 0x1}, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x80000000, 0x345d}, &(0x7f0000000240)=0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=0xd0d}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x10, &(0x7f0000000500)={&(0x7f0000000300)=""/163, 0xa3, r3}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r3, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r4, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) ioctl(r4, 0x0, &(0x7f0000000100)="080db5055e0bcfe847a071") ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', r5}) bind$rose(r0, 0x0, 0x0) 20:34:28 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x2) 20:34:28 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r1, r0, 0x0, 0x8000000000004) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x8000000000004) r4 = socket(0xa, 0x1, 0x0) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000000)={r6}, 0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f00000000c0)={r6, @in={{0x2, 0x4e20, @multicast2}}, [0x8, 0x8000, 0x401, 0x71, 0x5, 0x0, 0x2, 0x10001, 0x7, 0xffffffff00000001, 0x98, 0x7fffffff, 0x2, 0x8]}, &(0x7f0000000000)=0x100) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f00000001c0)={r7, @in={{0x2, 0x4e21, @remote}}, 0x4, 0xb5, 0x1000, 0x7, 0x1f}, &(0x7f0000000040)=0x98) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="85ae77b1ced4a5b00474", @ANYRES16=r9, @ANYBLOB="20002cbd7000fcdbdf251900000008000100ffffffff"], 0x1c}, 0x1, 0x0, 0x0, 0x40891}, 0x4850) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000300)={@dev, @private}, &(0x7f00000002c0)=0xc) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)={0x36c, r9, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x40, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x3c, 0x2, "ed0b14a352620efc6245d741e6495f75ed0a52778538be2c0787b8ca680f2906ae6a487cdc0a1ee2d419c7b92cc802483afb2f0dc30e280d"}]}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x81, 0x8}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x9}, {0x8, 0x0, 0xce}, {0x8, 0x0, 0x6}]}, @NL80211_ATTR_IE={0x285, 0x2a, "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"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @broadcast}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x54, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xda}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x6, 0x1, "a48e"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @remote}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x4}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x3}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x38}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xf, 0x1, "ac701f804d2b00ac9027a6"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x8, 0x1, "ed568952"}]}]}, 0x36c}, 0x1, 0x0, 0x0, 0x4040805}, 0x8014) connect$rose(r8, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) bind$rose(r8, 0x0, 0x0) 20:34:28 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x1000000000000000}, 0x0) 20:34:28 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth1_virt_wifi\x00', 0x0}) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4a128c1aa7cf68a72e18b043723262ef1db17855e9b9c3c4f3d85375cfa53566d1bccb85f7297cb07953a21aa4f222f0b3883bb31e8a8f15e68f55716d40aae2130362bc729067a2c18ab1d030fec56022b3ed49a32965d048e33836476967ed3c42524afa00cc95b8b1bd067d02f67da010df77addc64711eb3b771464ded7467a586a825be4a7edbb278663c325af5e83e40a3b1b721b5fd06c0500279e00f3b4768d6ebe10ee02f6b2e7f55de781d27c9588c2cc3bb100589391f51e", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:34:28 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) [ 659.629692][T25761] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 659.657079][T25761] device macsec1 entered promiscuous mode [ 659.688724][T25761] device vlan0 entered promiscuous mode 20:34:28 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x8dffffff00000000}, 0x0) [ 659.736205][T25761] device vlan0 left promiscuous mode 20:34:28 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) r1 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0x60, 0x80800) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0xe0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x6, 0x1}, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x80000000, 0x345d}, &(0x7f0000000240)=0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=0xd0d}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x10, &(0x7f0000000500)={&(0x7f0000000300)=""/163, 0xa3, r3}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r3, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r4, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) ioctl(r4, 0x0, &(0x7f0000000100)="080db5055e0bcfe847a071") ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', r5}) bind$rose(r0, 0x0, 0x0) 20:34:28 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x3) 20:34:28 executing program 2: socket(0xf, 0x800, 0x400) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @bcast}, 0x1c) bind$rose(r0, 0x0, 0x0) 20:34:29 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0xeffdffff00000000}, 0x0) 20:34:29 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) r1 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0x60, 0x80800) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0xe0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x6, 0x1}, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x80000000, 0x345d}, &(0x7f0000000240)=0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=0xd0d}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x10, &(0x7f0000000500)={&(0x7f0000000300)=""/163, 0xa3, r3}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r3, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r4, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) ioctl(r4, 0x0, &(0x7f0000000100)="080db5055e0bcfe847a071") ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', r5}) bind$rose(r0, 0x0, 0x0) 20:34:29 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) socket$can_raw(0x1d, 0x3, 0x1) bind$rose(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x8000000000004) recvmsg$can_j1939(r1, &(0x7f0000000240)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/178, 0xb2}], 0x1, &(0x7f00000001c0)=""/97, 0x61}, 0x40000002) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000280)={0x0, @private, @multicast1}, &(0x7f00000002c0)=0xc) 20:34:29 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x4) 20:34:29 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0) 20:34:29 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) r1 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0x60, 0x80800) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0xe0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x6, 0x1}, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x80000000, 0x345d}, &(0x7f0000000240)=0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=0xd0d}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x10, &(0x7f0000000500)={&(0x7f0000000300)=""/163, 0xa3, r3}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r3, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r4, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) ioctl(r4, 0x0, &(0x7f0000000100)="080db5055e0bcfe847a071") ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', r5}) 20:34:29 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth1_virt_wifi\x00', 0x0}) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4a128c1aa7cf68a72e18b043723262ef1db17855e9b9c3c4f3d85375cfa53566d1bccb85f7297cb07953a21aa4f222f0b3883bb31e8a8f15e68f55716d40aae2130362bc729067a2c18ab1d030fec56022b3ed49a32965d048e33836476967ed3c42524afa00cc95b8b1bd067d02f67da010df77addc64711eb3b771464ded7467a586a825be4a7edbb278663c325af5e83e40a3b1b721b5fd06c0500279e00f3b4768d6ebe10ee02f6b2e7f55de781d27c9588c2cc3bb100589391f51e", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:34:29 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:34:29 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0x60, 0x80800) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0xe0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x6, 0x1}, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x80000000, 0x345d}, &(0x7f0000000240)=0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=0xd0d}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x10, &(0x7f0000000500)={&(0x7f0000000300)=""/163, 0xa3, r2}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r2, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r3, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) ioctl(r3, 0x0, &(0x7f0000000100)="080db5055e0bcfe847a071") ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) 20:34:29 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) 20:34:29 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x7) 20:34:29 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r1, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r2, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) bind$rose(r2, 0x0, 0x0) getsockopt$rose(r2, 0x104, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) bind$rose(r1, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r3, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) bind$rose(r3, 0x0, 0x0) bind$rose(r0, 0x0, 0x4) 20:34:29 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0x60, 0x80800) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0xe0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x6, 0x1}, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x80000000, 0x345d}, &(0x7f0000000240)=0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=0xd0d}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x10, &(0x7f0000000500)={&(0x7f0000000300)=""/163, 0xa3, r1}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r1, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r2, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) ioctl(r2, 0x0, &(0x7f0000000100)="080db5055e0bcfe847a071") [ 660.572107][T25819] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 20:34:29 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 20:34:29 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000040), &(0x7f00000000c0)=0x40) connect$rose(r0, &(0x7f0000000000)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) bind$rose(r0, 0x0, 0x0) [ 660.633954][T25819] device macsec1 entered promiscuous mode [ 660.671112][T25819] device vlan0 entered promiscuous mode 20:34:29 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x9) [ 660.705684][T25819] device vlan0 left promiscuous mode 20:34:29 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x3}, 0x0) 20:34:29 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0x60, 0x80800) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0xe0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x6, 0x1}, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x80000000, 0x345d}, &(0x7f0000000240)=0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=0xd0d}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x10, &(0x7f0000000500)={&(0x7f0000000300)=""/163, 0xa3, r1}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r1, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r2, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) 20:34:30 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth1_virt_wifi\x00', 0x0}) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4a128c1aa7cf68a72e18b043723262ef1db17855e9b9c3c4f3d85375cfa53566d1bccb85f7297cb07953a21aa4f222f0b3883bb31e8a8f15e68f55716d40aae2130362bc729067a2c18ab1d030fec56022b3ed49a32965d048e33836476967ed3c42524afa00cc95b8b1bd067d02f67da010df77addc64711eb3b771464ded7467a586a825be4a7edbb278663c325af5e83e40a3b1b721b5fd06c0500279e00f3b4768d6ebe10ee02f6b2e7f55de781d27c9588c2cc3bb100589391f51e", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 661.250579][T25846] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 661.264374][T25846] device macsec1 entered promiscuous mode [ 661.270665][T25846] device vlan0 entered promiscuous mode [ 661.279762][T25846] device vlan0 left promiscuous mode 20:34:30 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:34:30 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) bind$rose(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x30, 0x1409, 0x1, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x10000080) 20:34:30 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x7}, 0x0) 20:34:30 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0x60, 0x80800) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0xe0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x6, 0x1}, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x80000000, 0x345d}, &(0x7f0000000240)=0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=0xd0d}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x10, &(0x7f0000000500)={&(0x7f0000000300)=""/163, 0xa3, r1}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r1, 0x4) socket$netlink(0x10, 0x3, 0x0) 20:34:30 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0xa) 20:34:30 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) 20:34:30 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0x60, 0x80800) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0xe0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x6, 0x1}, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x80000000, 0x345d}, &(0x7f0000000240)=0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=0xd0d}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x10, &(0x7f0000000500)={&(0x7f0000000300)=""/163, 0xa3, r1}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r1, 0x4) 20:34:30 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) bind$rose(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r1, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x18, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x4}]}, 0x18}, 0x1, 0x30000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x80000001, 0x0, {0x0, 0x0, 0x0, r6, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x40}}, 0x24) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'macvtap0\x00', r6}) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)={0x454, r3, 0x2, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x38, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x124, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xe}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xb}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xa0, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0xbc, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x114, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x4}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}]}, 0x454}, 0x1, 0x0, 0x0, 0x48004}, 0x40) 20:34:30 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0xe) 20:34:30 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x300}, 0x0) 20:34:30 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0x60, 0x80800) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0xe0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x6, 0x1}, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x80000000, 0x345d}, &(0x7f0000000240)=0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=0xd0d}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x10, &(0x7f0000000500)={&(0x7f0000000300)=""/163, 0xa3, r1}}, 0x10) 20:34:30 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth1_virt_wifi\x00', 0x0}) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)) setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 662.033459][T25883] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 662.049938][T25883] device macsec1 entered promiscuous mode [ 662.062457][T25883] device vlan0 entered promiscuous mode [ 662.071274][T25883] device vlan0 left promiscuous mode 20:34:31 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:34:31 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x700}, 0x0) 20:34:31 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0x60, 0x80800) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0xe0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x6, 0x1}, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x80000000, 0x345d}, &(0x7f0000000240)=0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=0xd0d}}, 0x10) 20:34:31 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x10) 20:34:31 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) bind$rose(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r1, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) r2 = accept(r1, &(0x7f0000000000)=@x25, &(0x7f00000000c0)=0x80) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x4e21, 0x2, @loopback, 0x100}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x34}}], 0x2c) 20:34:31 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, 0x1, @bcast}, 0x1c) bind$rose(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x8000000000004) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000019300)=ANY=[@ANYBLOB="0301ffe1ceefd666c4a41d0ab1974d2e9f0452563d5c4194afec8969c94a6eefde0069ee91f1fc10043b801f951cf1e544457c9a71dc1e2e907cbabf82e05f66f5fa3e9d49559e36c8c73eddfa9368164f7c2a5049a129c011d0ce0e9d3aea3f5841c89753a7fa4b6e7915af5a3de387aab1c38e316df2dd07836a60", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000001c0)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000240)={r4, 0x7}, &(0x7f0000000280)=0x8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0xf000) sendfile(r5, r6, 0x0, 0xf03b0000) sendfile(r5, r1, 0x0, 0x8000000000004) r7 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r7, 0x10e, 0x8, &(0x7f00000002c0)=""/102400, &(0x7f0000000180)=0x19000) r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00'}, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f00000000c0)={r7, r8}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000000004) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000192c0)) 20:34:31 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0xf0ff7f}, 0x0) 20:34:31 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0x60, 0x80800) socket$netlink(0x10, 0x3, 0x0) 20:34:31 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x11) 20:34:31 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth1_virt_wifi\x00', 0x0}) socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4a128c1aa7cf68a72e18b043723262ef1db17855e9b9c3c4f3d85375cfa53566d1bccb85f7297cb07953a21aa4f222f0b3883bb31e8a8f15e68f55716d40aae2130362bc729067a2c18ab1d030fec56022b3ed49a32965d048e33836476967ed3c42524afa00cc95b8b1bd067d02f67da010df77addc64711eb3b771464ded7467a586a825be4a7edbb278663c325af5e83e40a3b1b721b5fd06c0500279e00f3b4768d6ebe10ee02f6b2e7f55de781d27c9588c2cc3bb100589391f51e", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:34:31 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) 20:34:31 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0x60, 0x80800) [ 662.587581][T25912] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 662.640017][T25912] device macsec1 entered promiscuous mode [ 662.665139][T25912] device vlan0 entered promiscuous mode [ 662.712773][T25912] device vlan0 left promiscuous mode 20:34:32 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:34:32 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x15) 20:34:32 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x3000000}, 0x0) 20:34:32 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) 20:34:32 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth1_virt_wifi\x00', 0x0}) setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4a128c1aa7cf68a72e18b043723262ef1db17855e9b9c3c4f3d85375cfa53566d1bccb85f7297cb07953a21aa4f222f0b3883bb31e8a8f15e68f55716d40aae2130362bc729067a2c18ab1d030fec56022b3ed49a32965d048e33836476967ed3c42524afa00cc95b8b1bd067d02f67da010df77addc64711eb3b771464ded7467a586a825be4a7edbb278663c325af5e83e40a3b1b721b5fd06c0500279e00f3b4768d6ebe10ee02f6b2e7f55de781d27c9588c2cc3bb100589391f51e", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:34:32 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r1, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) bind$rose(r1, 0x0, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r2, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) bind$rose(r2, 0x0, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r3, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) bind$rose(r3, 0x0, 0x0) bind$rose(r3, 0x0, 0xfffffffffffffede) 20:34:32 executing program 1: connect$rose(0xffffffffffffffff, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) 20:34:32 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) 20:34:32 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x34) [ 663.390905][T25941] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 663.425982][T25941] device macsec1 entered promiscuous mode [ 663.438638][T25941] device vlan0 entered promiscuous mode [ 663.472040][T25941] device vlan0 left promiscuous mode 20:34:32 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) 20:34:32 executing program 1: connect$rose(0xffffffffffffffff, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) 20:34:32 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f00000000c0)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendfile(r4, r0, 0x0, 0x1ff) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000100)={{&(0x7f0000000240)=""/245, 0xf5}, &(0x7f0000000080)}, 0x20) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFNL_MSG_CTHELPER_GET(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4d}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x6c, 0x1, 0x9, 0x101, 0x0, 0x0, {0xc, 0x0, 0x9}, [@NFCTH_TUPLE={0x40, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @empty}}}]}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40c0815) connect$bt_sco(r1, &(0x7f0000000000), 0x8) bind$rose(r0, 0x0, 0x0) 20:34:33 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:34:33 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x1f4) 20:34:33 executing program 1: connect$rose(0xffffffffffffffff, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) 20:34:33 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x7ffff000}, 0x0) 20:34:33 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 664.186954][T25974] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 20:34:33 executing program 1: syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(0xffffffffffffffff, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) 20:34:33 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x240) 20:34:33 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x8dffffff}, 0x0) [ 664.259636][T25974] device macsec1 entered promiscuous mode [ 664.287902][T25974] device vlan0 entered promiscuous mode [ 664.326556][T25974] device vlan0 left promiscuous mode 20:34:33 executing program 1: syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(0xffffffffffffffff, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) 20:34:33 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0xeffdffff}, 0x0) 20:34:33 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x300) 20:34:33 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r1, r0, 0x0, 0x8000000000004) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r3 = socket(0x0, 0x1, 0x7f) close(r3) r4 = socket$inet(0x2, 0x800, 0x8) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000000)={r5}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={r5, 0x20, &(0x7f0000000100)=[@in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e20, @multicast1}]}, &(0x7f0000000200)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000240)={0x8, 0x400a, 0x8, 0x3ff, r6}, 0x10) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r2, 0x8983, &(0x7f00000000c0)) connect$rds(r1, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='threaded\x00', 0x9) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r7, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) bind$rose(r7, 0x0, 0x0) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) socket$inet_smc(0x2b, 0x1, 0x0) 20:34:34 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:34:34 executing program 1: syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(0xffffffffffffffff, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) 20:34:34 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x3e8) 20:34:34 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) 20:34:34 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x4, [@bcast, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000002980)='cpuset.effective_mems\x00', 0x0, 0x0) sendmsg$nl_crypto(r2, &(0x7f0000002b40)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002b00)={&(0x7f0000002a00)=@upd={0xf8, 0x12, 0x300, 0x70bd28, 0x25dfdbfd, {{'ctr-aes-neon\x00'}, [], [], 0xff90f1ecdfc9b256, 0x2000}, [{0x8, 0x1, 0xb2}, {0x8, 0x1, 0x8}, {0x8, 0x1, 0x3f}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x10040) ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0x40) bind$rose(r0, 0x0, 0x0) r3 = openat$cgroup(r2, &(0x7f0000000580)='syz0\x00', 0x200002, 0x0) r4 = openat$cgroup(r3, &(0x7f00000005c0)='syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='rdma.current\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r6, r5, 0x0, 0x8000000000004) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3e0, 0xe8, 0x1e8, 0x1e8, 0x2f8, 0x2f8, 0x2f8, 0x4, &(0x7f0000000100), {[{{@arp={@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x17}, 0xff, 0xffffffff, 0x10, 0x8, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@broadcast, {[0x0, 0x0, 0xff, 0x0, 0xff, 0xff]}}, 0x80, 0x0, 0x2, 0x29, 0x4, 0x401, 'bond_slave_0\x00', 'caif0\x00', {0xff}, {0xff}, 0x0, 0x190}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x40}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x6, 0x7a, {0x9}}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x1b}, @broadcast, 0xff, 0x0, 0x3, 0x3, {@mac=@multicast, {[0xff, 0xff, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@random="1d7677ff3002", {[0x0, 0xff, 0x0, 0xff, 0xff]}}, 0x80, 0x1, 0x1, 0x8, 0x6, 0x2, 'veth1_vlan\x00', 'macvlan1\x00', {}, {}, 0x0, 0x12}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x430) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r8, r7, 0x0, 0x8000000000004) ioctl$sock_netrom_SIOCADDRT(r8, 0x890b, &(0x7f0000000600)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={'nr', 0x0}, 0x3, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6f73, 0x4, [@bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) 20:34:34 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:34:34 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0xfffffdef}, 0x0) [ 665.106476][T26024] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 20:34:34 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, 0x0, 0x0) 20:34:34 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @bcast, 0x1, @bcast}, 0xfffffffffffffe3f) bind$rose(r0, 0x0, 0x0) [ 665.176875][T26024] device macsec1 entered promiscuous mode 20:34:34 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x700) 20:34:34 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) [ 665.233414][T26024] device vlan0 entered promiscuous mode [ 665.247257][T26024] device vlan0 left promiscuous mode 20:34:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0x8000000000004) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000140)=0x1000, 0x4) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={0x2c, r2, 0x401, 0x0, 0x0, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}}, 0x2c}}, 0x0) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r5, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) bind$rose(r5, 0x0, 0x0) 20:34:35 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:34:35 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, 0x0, 0x0) 20:34:35 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0xffffff8d}, 0x0) 20:34:35 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x900) 20:34:35 executing program 2: connect$rose(0xffffffffffffffff, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r1, 0xa20, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x101}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40804}, 0x4880) gettid() bind$rose(0xffffffffffffffff, 0x0, 0x0) 20:34:35 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:34:35 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, 0x0, 0x0) 20:34:35 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0) 20:34:35 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:34:35 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) bind$rose(r0, 0x0, 0x0) 20:34:35 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0xa00) 20:34:35 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth1_virt_wifi\x00', 0x0}) socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 666.266808][T26085] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 666.330498][T26085] device macsec1 entered promiscuous mode [ 666.363054][T26085] device vlan0 entered promiscuous mode [ 666.372669][T26085] device vlan0 left promiscuous mode 20:34:36 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:34:36 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) bind$rose(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e23}, 0x1c) listen(r1, 0x200000000002) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000080)=0xe5) r2 = socket(0xa, 0x1, 0x0) close(r2) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000000)={r4}, 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={r4}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000140)={r5, 0x13b2, 0x2, [0x0, 0x7]}, &(0x7f0000000180)=0xc) 20:34:36 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0xe00) 20:34:36 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:34:36 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x3) 20:34:36 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth1_virt_wifi\x00', 0x0}) socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4a128c1aa7cf68a72e18b043723262ef1db17855e9b9c3c4f3d85375cfa53566d1bccb85f7297cb07953a21aa4f222f0b3883bb31e8a8f15e68f55716d40aae2130362bc729067a2c18ab1d030fec56022b3ed49a32965d048e33836476967ed3c42524afa00cc95b8b1bd067d02f67da010df77addc64711eb3b771464ded7467a586a825be4a7edbb278663c325af5e83e40a3b1b721b5fd06c0500279e00f3b4768d6ebe10ee02f6b2e7f55de781d27c9588c2cc3bb100589391f51e", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:34:36 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x7) 20:34:36 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xb, 0x80010, r0, 0x82a49000) bind$rose(r0, 0x0, 0x0) 20:34:36 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 667.015432][T26103] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 20:34:36 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x1100) [ 667.090873][T26103] device macsec1 entered promiscuous mode [ 667.100185][T26103] device vlan0 entered promiscuous mode [ 667.119642][T26103] device vlan0 left promiscuous mode 20:34:36 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x10) 20:34:36 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:34:36 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:34:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) recvmsg$kcm(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/244, 0xf4}, {&(0x7f0000000200)=""/73, 0x49}, {&(0x7f0000000280)=""/191, 0xbf}, {&(0x7f0000000340)=""/191, 0xbf}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000040)=""/19, 0x13}], 0x6, &(0x7f0000000500)=""/163, 0xa3}, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x5, 0x4) accept(r1, &(0x7f0000000600)=@x25={0x9, @remote}, &(0x7f0000000680)=0x80) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r3, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0xf000) sendfile(r5, r6, 0x0, 0xf03b0000) sendfile(r5, r4, 0x0, 0x8000000000004) openat$cgroup_ro(r4, &(0x7f00000006c0)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) bind$rose(r3, 0x0, 0x0) 20:34:36 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x1500) 20:34:36 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:34:36 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x300) 20:34:36 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth1_virt_wifi\x00', 0x0}) socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:34:37 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x700) 20:34:37 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 667.906113][T26139] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 20:34:37 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x3400) [ 667.968399][T26139] device macsec1 entered promiscuous mode [ 667.975502][T26139] device vlan0 entered promiscuous mode [ 667.990879][T26139] device vlan0 left promiscuous mode 20:34:37 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0xf0ff7f) 20:34:37 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:34:37 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x4000) 20:34:37 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000), 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:34:37 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r1, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) r2 = accept(r1, 0x0, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x4) bind$rose(r0, 0x0, 0x0) 20:34:37 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:34:37 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x1000000) 20:34:37 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x4002) 20:34:37 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth1_virt_wifi\x00', 0x0}) socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32], 0x50}}, 0x0) 20:34:37 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x3000000) 20:34:38 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:34:38 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0xe803) [ 668.885812][T26180] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 668.921137][T26180] device macsec1 entered promiscuous mode [ 668.941669][T26180] device vlan0 entered promiscuous mode 20:34:38 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 668.984151][T26180] device vlan0 left promiscuous mode 20:34:38 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) bind$rose(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r1, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r3, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40891}, 0x4850) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x168, r3, 0x408, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_MESH_SETUP={0x150, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_IE={0xb8, 0x3, "9904611d6d25af0ed0d5e50009e0d906ffb666d3875f8b323e461648a2979f1d69314c56938405a3169c1ddd518f0c7bbcb5dd1595c8aafe79cda67a20308dbf24504ac0aed283631edcf67225cb3173c6bead750a37dfd46db1fefbeeb6714fcefdfe0616574184d8fd5887032053d4704c58ed666d411b6798d92dfa05caff657977256c9d73dcfe8354e0089a1913c7b12e0e3753be40737fe8914d4ba511f8c55e44e5bbc56e35b9fc18a80a83f10af599cc"}, @NL80211_MESH_SETUP_IE={0x79, 0x3, "4d7bca31ddecce81728aac787f7321a95484a978a08354db903ca2cbaed551b0759d45aa892c23f102233e4fb34b6694dd8836eb3abdb87ce4c1d8911815228db2b54d960dddbe457cc95ac322a650b9eef10e69b173eb89905955d19ed0ed017b2bf8cc39303391591fbaf58891c3173ec3a9fe07"}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x168}, 0x1, 0x0, 0x0, 0x20040000}, 0x24000000) 20:34:38 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x7000000) 20:34:38 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000), 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:34:38 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0xf401) 20:34:38 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:34:38 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x10000000) 20:34:38 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r2 = accept4(r1, &(0x7f0000001540)=@ipx, &(0x7f00000015c0)=0x80, 0x80000) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000001600)={'bond0\x00', 0x1cb3}) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r3, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) bind$rose(r3, 0x0, 0x0) bind$rose(r3, &(0x7f0000000000)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) bind$rose(r2, &(0x7f0000000340)=@short={0x2, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, 0x1, @default}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b0000) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000180)={@dev={0xac, 0x14, 0x14, 0x21}, @broadcast, @remote}, 0xc) bind$rose(r0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x80000001, 0x0, {0x0, 0x0, 0x0, r6, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x40}}, 0x24) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x34, 0x14, 0x200, 0x70bd28, 0x25dfdbfb, {0x2, 0x78, 0x48, 0x0, r6}, [@IFA_LABEL={0x14, 0x3, 'veth1_to_team\x00'}, @IFA_FLAGS={0x8, 0x8, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) 20:34:38 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth1_virt_wifi\x00', 0x0}) socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4a128c1aa7cf68a72e18b043723262ef1db17855e9b9c3c4f3d85375cfa53566d1bccb85f7297cb07953a21aa4f222f0b3883bb31e8a8f15e68f55716d40aae2130362bc729067a2c18ab1d030fec56022b3ed49a32965d048e33836476967ed3c42524afa00cc95b8b1bd067d02f67da010df77addc64711eb3b771464ded7467a586a825be4a7edbb278663c325af5e83e40a3b1b721b5fd06c0500279e00f3b4768d6ebe10ee02f6b2e7f55de781d27c9588c2cc3bb100589391f51e", @ANYRES32], 0x50}}, 0x0) 20:34:38 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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"], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:34:38 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth1_virt_wifi\x00', 0x0}) socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4a128c1aa7cf68a72e18b043723262ef1db17855e9b9c3c4f3d85375cfa53566d1bccb85f7297cb07953a21aa4f222f0b3883bb31e8a8f15e68f55716d40aae2130362bc729067a2c18ab1d030fec56022b3ed49a32965d048e33836476967ed3c42524afa00cc95b8b1bd067d02f67da010df77addc64711eb3b771464ded7467a586a825be4a7edbb278663c325af5e83e40a3b1b721b5fd06c0500279e00f3b4768d6ebe10ee02f6b2e7f55de781d27c9588c2cc3bb100589391f51e", @ANYRES32], 0x50}}, 0x0) 20:34:38 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x20000) 20:34:38 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x7ffff000) 20:34:38 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x8dffffff) 20:34:38 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth1_virt_wifi\x00', 0x0}) socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32], 0x50}}, 0x0) [ 669.777439][T26227] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 669.830571][T26227] device macsec1 entered promiscuous mode [ 669.850730][T26227] device vlan0 entered promiscuous mode [ 669.875215][T26227] device vlan0 left promiscuous mode 20:34:39 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000), 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:34:39 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x20c49a) 20:34:39 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth1_virt_wifi\x00', 0x0}) socket$inet6_sctp(0xa, 0x10000000005, 0x84) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32], 0x50}}, 0x0) 20:34:39 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0xeffdffff) 20:34:39 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, 0x0, 0xfe8c) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 670.529538][T26248] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 670.564352][T26248] device macsec1 entered promiscuous mode 20:34:39 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0xf0ffffff) [ 670.587744][T26248] device vlan0 entered promiscuous mode [ 670.621376][T26248] device vlan0 left promiscuous mode 20:34:39 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4a128c1aa7cf68a72e18b043723262ef1db17855e9b9c3c4f3d85375cfa53566d1bccb85f7297cb07953a21aa4f222f0b3883bb31e8a8f15e68f55716d40aae2130362bc729067a2c18ab1d030fec56022b3ed49a32965d048e33836476967ed3c42524afa00cc95b8b1bd067d02f67da010df77addc64711eb3b771464ded7467a586a825be4a7edbb278663c325af5e83e40a3b1b721b5fd06c0500279e00f3b4768d6ebe10ee02f6b2e7f55de781d27c9588c2cc3bb100589391f51e"], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:34:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r1, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) sendfile(r0, r1, &(0x7f0000000000)=0x6, 0x1) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r2, &(0x7f0000000080)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) bind$rose(r2, 0x0, 0x0) 20:34:39 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x800000) 20:34:39 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0xfffffdef) 20:34:40 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0xf) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) r4 = socket(0xa, 0x1, 0x0) close(r4) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000000)={r6}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={r6}, &(0x7f00000000c0)=0x10) getsockopt$netlink(r1, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x11, r1, 0xaaa28000) bind$rose(r0, 0x0, 0x0) 20:34:40 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0xffffff7f) [ 670.934325][T26272] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 670.964328][T26272] device macsec1 entered promiscuous mode [ 670.984892][T26272] device vlan0 entered promiscuous mode [ 670.999298][T26272] device vlan0 left promiscuous mode 20:34:40 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:34:40 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x1000000) 20:34:40 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0xffffff8d) 20:34:40 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) sendfile(r2, r1, 0x0, 0x8000000000004) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) bind$rose(r0, 0x0, 0x0) 20:34:40 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth1_virt_wifi\x00', 0x0}) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32], 0x50}}, 0x0) [ 671.419333][T26289] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 671.457713][T26289] device macsec1 entered promiscuous mode 20:34:40 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0xfffffff0) [ 671.482577][T26289] device vlan0 entered promiscuous mode [ 671.537557][T26289] device vlan0 left promiscuous mode 20:34:40 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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"], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:34:40 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x2000000) 20:34:40 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x7ffffffff000) [ 671.900494][T26314] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 20:34:41 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0xf0ff7f00000000) [ 671.953102][T26314] device macsec1 entered promiscuous mode [ 671.972038][T26314] device vlan0 entered promiscuous mode 20:34:41 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x3000000) [ 671.995067][T26314] device vlan0 left promiscuous mode 20:34:41 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0xf0ffffff7f0000) 20:34:41 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:34:41 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x4000000) 20:34:41 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x100000000000000) 20:34:41 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) bind$rose(r0, 0x0, 0x0) 20:34:41 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth1_virt_wifi\x00', 0x0}) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4a128c1aa7cf68a72e18b043723262ef1db17855e9b9c3c4f3d85375cfa53566d1bccb85f7297cb07953a21aa4f222f0b3883bb31e8a8f15e68f55716d40aae2130362bc729067a2c18ab1d030fec56022b3ed49a32965d048e33836476967ed3c42524afa00cc95b8b1bd067d02f67da010df77addc64711eb3b771464ded7467a586a825be4a7edbb278663c325af5e83e40a3b1b721b5fd06c0500279e00f3b4768d6ebe10ee02f6b2e7f55de781d27c9588c2cc3bb100589391f51e", @ANYRES32], 0x50}}, 0x0) 20:34:41 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x7000000) [ 672.593684][T26347] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 672.608517][T26347] device macsec1 entered promiscuous mode [ 672.615206][T26347] device vlan0 entered promiscuous mode [ 672.625117][T26347] device vlan0 left promiscuous mode 20:34:41 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:34:41 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x300000000000000) 20:34:41 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$rds(0x15, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) bind$rose(r0, 0x0, 0x0) 20:34:41 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x9000000) 20:34:42 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x700000000000000) 20:34:42 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0xa000000) [ 672.912863][T26360] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 20:34:42 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:34:42 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) connect$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x8932, &(0x7f00000001c0)="080db5055e0bcfe847a071") r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') r4 = gettid() syz_open_procfs$namespace(r4, 0xfffffffffffffffe) r5 = gettid() syz_open_procfs$namespace(r5, &(0x7f0000000440)='ns/pid\x00') syz_open_procfs$namespace(r4, 0x0) syz_open_procfs$namespace(r4, &(0x7f0000000400)='ns/pid\x00') r6 = socket$inet(0x2, 0x3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f00000001c0)={0x0, @local, @local}, &(0x7f00000000c0)) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="110700000000000000000b00000008000300", @ANYRES32=r7, @ANYBLOB="5dfef5c7116717e281704dfe7c8e8e09a741b81e27441b9d94eec0d0ee81d5d8496dec4ea3005ad3046610ebc8f8fdfea13fc79bbd0c0700bb34d6f75dfcee2fbb4350440b1fa20ce29990245a835624eea9a6b062854c635acf8c700a615c6bb06966fbdfaf"], 0x1c}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x48084) bind$rose(r0, 0x0, 0x0) 20:34:42 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32], 0x50}}, 0x0) 20:34:42 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:34:42 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x1000000000000000) 20:34:42 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0xe000000) 20:34:42 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x8dffffff00000000) [ 673.265909][T26380] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 673.285515][T26381] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 20:34:42 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x10000000) 20:34:42 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 673.340418][T26381] device macsec1 entered promiscuous mode [ 673.361392][T26381] device vlan0 entered promiscuous mode [ 673.385656][T26381] device vlan0 left promiscuous mode 20:34:42 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0xeffdffff00000000) 20:34:42 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x11000000) 20:34:42 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0xf0ffffff00000000) [ 673.732107][T26396] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 20:34:43 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0xffffff7f00000000) 20:34:43 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x15000000) 20:34:43 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB, @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:34:43 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @default, @netrom={'nr', 0x0}, 0x8, [@default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) bind$rose(r0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r3, r2, 0x0, 0x8000000000004) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r5, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r6}) ioctl$SIOCAX25GETUID(r2, 0x89e0, &(0x7f0000000000)={0x3, @default, r6}) 20:34:43 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:34:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32], 0x50}}, 0x0) [ 674.167319][T26414] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 674.210158][T26414] device macsec1 entered promiscuous mode [ 674.229739][T26414] device vlan0 entered promiscuous mode 20:34:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x54, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x54}}, 0x0) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0xf8, r1, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1b}]}, @IPVS_CMD_ATTR_SERVICE={0x78, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x25, 0xc}}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x11}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x83}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x58}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40}, 0x20048810) r2 = socket$alg(0x26, 0x5, 0x0) socketpair(0x21, 0x800, 0x6, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000080)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="5a060000", @ANYRES16=r4, @ANYBLOB], 0x58}}, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, r4, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x48}}, 0x2000014) bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r5, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x1c, r6, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x400}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4008004) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r7 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 20:34:43 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x34000000) [ 674.280936][T26414] device vlan0 left promiscuous mode 20:34:43 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x40000000) 20:34:43 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x40020000) [ 674.746838][T26420] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 20:34:43 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB, @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:34:43 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x8000000000004) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r2, 0x28}, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) [ 674.890798][T26445] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 20:34:44 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x9ac42000) 20:34:44 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB, @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:34:44 executing program 1: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32], 0x50}}, 0x0) 20:34:44 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) bind$rose(r0, 0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) 20:34:44 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) getsockopt$TIPC_NODE_RECVQ_DEPTH(r3, 0x10f, 0x83, &(0x7f0000000000), &(0x7f0000000040)=0x4) 20:34:44 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) [ 675.102775][T26455] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 20:34:44 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4a128c1aa7cf68a72e18b043723262ef1db17855e9b9c3c4f3d85375cfa53566d1bccb85f7297cb07953a21aa4f222f0b3883bb31e8a8f15e68f55716d40aae", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:34:44 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0xe8030000) 20:34:44 executing program 1: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32], 0x50}}, 0x0) 20:34:44 executing program 0: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket(0xa, 0x1, 0x0) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000000)={r3}, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000000c0)={r3, 0xb, "ff8227747f07965deb5975"}, &(0x7f0000000100)=0x13) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r7, r6, 0x0, 0x8000000000004) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000000)={0x0, @initdev, @remote}, &(0x7f0000000040)=0xc) setsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@rand_addr=0x64010101, @in6=@private2, 0x4e21, 0x0, 0x4e24, 0x1, 0x2, 0x180, 0x0, 0x0, r8, 0xee00}, {0x8, 0x7, 0xfff, 0x3f, 0x1, 0x8760000, 0x3, 0x1f}, {0x5, 0x6, 0x6, 0x6}, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d4, 0x33}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3502, 0x2, 0x0, 0x5, 0x100, 0x401, 0x8}}, 0xe8) sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 20:34:44 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @bcast}, 0x1c) bind$rose(r0, 0x0, 0x0) 20:34:44 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0xf4010000) [ 675.316174][T26472] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 20:34:44 executing program 1: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32], 0x50}}, 0x0) 20:34:44 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) ioctl$IMGETDEVINFO(r3, 0x80044944, &(0x7f0000000000)={0x6}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r5 = accept4(r0, 0x0, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendfile(0xffffffffffffffff, r6, 0x0, 0xf03b0000) getsockopt$inet_mtu(r6, 0x0, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) [ 675.371315][T26472] device macsec1 entered promiscuous mode [ 675.400463][T26472] device vlan0 entered promiscuous mode 20:34:44 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x10000000000) [ 675.442537][T26472] device vlan0 left promiscuous mode 20:34:44 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) bind$rose(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r2, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) getsockopt$netlink(r2, 0x10e, 0x6, &(0x7f00000001c0)=""/6, &(0x7f0000000180)=0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="340000e90f000104000020000000000000000000", @ANYRES32=r5, @ANYBLOB="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"], 0x34}}, 0x0) r6 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) socket(0xa, 0x1, 0x0) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000002c0)={r8, 0x2, 0x7f}, 0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000380)=ANY=[@ANYRES32=r8, @ANYBLOB="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"], &(0x7f0000000280)=0x18) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', r5}) 20:34:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 20:34:45 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:34:45 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB, @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:34:45 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x20000000000) 20:34:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 20:34:45 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x40000) 20:34:45 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGL2CALL(r0, 0x89e5, &(0x7f0000000000)=@netrom) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) bind$rose(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x103201, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0xf000) sendfile(r5, r6, 0x0, 0xf03b0000) sendfile(r5, r4, 0x0, 0x8000000000004) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f00000001c0)=r5) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00'}, &(0x7f0000000040)=0x44) 20:34:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 20:34:45 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r1, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x54, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8841}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x70800}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xb4, r2, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x59}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x81}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x44000}, 0x4000040) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 20:34:45 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x2000000000000) [ 676.217193][T26521] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 20:34:45 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB, @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:34:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 20:34:45 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000080)={{0xff, @local, 0x4e20, 0x1, 'sed\x00', 0x2, 0x3ff, 0x23}, {@empty, 0x4e22, 0x0, 0x7f, 0x40}}, 0x44) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) ioctl$SIOCNRDECOBS(r4, 0x89e2) [ 676.464907][T26536] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 676.560066][T26538] IPVS: set_ctl: invalid protocol: 255 172.20.20.170:20000 [ 676.587889][T26540] IPVS: set_ctl: invalid protocol: 255 172.20.20.170:20000 20:34:45 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:34:45 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x80000000000000) 20:34:45 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB, @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:34:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 20:34:45 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) write$cgroup_int(r5, &(0x7f0000000080)=0xfffffffffffffff7, 0x12) ioctl$SIOCPNGETOBJECT(r3, 0x89e0, &(0x7f0000000000)=0x9) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) [ 676.987642][T26549] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 20:34:46 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) bind$rose(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r1, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000000)) 20:34:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 20:34:46 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:34:46 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x100000000000000) 20:34:46 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) accept4(r0, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r1, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000000)) r2 = socket(0x1, 0x3, 0x5) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0xd) [ 677.194882][T26562] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 677.222974][T26562] device macsec1 entered promiscuous mode [ 677.229274][T26562] device vlan0 entered promiscuous mode 20:34:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x50}}, 0x0) 20:34:46 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x200000000000000) [ 677.242181][T26562] device vlan0 left promiscuous mode 20:34:46 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:34:46 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') r4 = socket$inet(0x2, 0x3, 0x4) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000001c0)={0x0, @local, @local}, &(0x7f00000000c0)) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)={0x1c, r3, 0x711, 0x0, 0x0, {0xb}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008804}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1000}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x101}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x8842e8f259c2e637) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) bind$rose(r0, 0x0, 0x0) 20:34:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x50}}, 0x0) 20:34:46 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x300000000000000) 20:34:46 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_user\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x8000000000004) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r1, 0xb}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0800000000004e0000", 0x18) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r6, r5, 0x0, 0x8000000000004) accept$alg(r6, 0x0, 0x0) accept$alg(r4, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) sendfile(r7, r8, 0x0, 0xf03b0000) bind$alg(r8, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) 20:34:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x50}}, 0x0) 20:34:46 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB, @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:34:47 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x400000000000000) 20:34:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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"], 0x50}}, 0x0) 20:34:47 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) connect$nfc_raw(r2, &(0x7f0000000000)={0x27, 0x1, 0x0, 0x3}, 0x10) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) bind$rose(r0, 0x0, 0x0) 20:34:47 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r2, 0x29, 0xcf, &(0x7f0000b67000), &(0x7f0000000000)=0x4) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r3, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) r4 = accept(r3, &(0x7f0000000040)=@nl, &(0x7f00000000c0)=0x80) bind$rds(r4, &(0x7f0000000100)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r5 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) [ 677.964520][T26596] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 20:34:47 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB, @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 678.013027][T26600] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 678.048134][T26600] device macsec1 entered promiscuous mode [ 678.074914][T26600] device vlan0 entered promiscuous mode [ 678.094626][T26600] device vlan0 left promiscuous mode [ 678.299700][T26610] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 20:34:47 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:34:47 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) bind$rose(r0, 0x0, 0x0) 20:34:47 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x700000000000000) 20:34:47 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) accept4(r0, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r1, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) r2 = socket$netlink(0x10, 0x3, 0xf) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x37}, 0x1, 0x0, 0x0, 0x4000000}, 0x8040055) 20:34:47 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB, @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:34:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0], 0x50}}, 0x0) 20:34:47 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70dd111c8eff7f0000000000f44d0000", 0x28) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) [ 678.696280][T26621] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 678.729098][T26625] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. 20:34:47 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) bind$rose(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) ioctl$SIOCAX25CTLCON(r2, 0x89e8, &(0x7f0000000000)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x5, 0x8, 0x2, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 20:34:47 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x900000000000000) 20:34:47 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:34:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0], 0x50}}, 0x0) 20:34:47 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = accept4$tipc(r2, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) [ 678.904725][T26641] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 678.959682][T26644] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. 20:34:48 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:34:48 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) bind$rose(r0, 0x0, 0x0) 20:34:48 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0xa00000000000000) 20:34:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0], 0x50}}, 0x0) 20:34:48 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:34:48 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$can_raw(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@canfd={{0x4, 0x1, 0x1, 0x1}, 0x15, 0x3, 0x0, 0x0, "1d0619c20490ca137d8352b1fbdca0932bf00f7f406e04a056a0f5d991ba97b8efd6992ac6b085b456c565faeb98fa60fb932aab6daf1ee6eac818398be85006"}, 0x48}, 0x1, 0x0, 0x0, 0x4001000}, 0x20000000) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r2, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) r3 = gettid() syz_open_procfs$namespace(r3, 0xfffffffffffffffe) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/mnt\x00') r4 = syz_open_procfs$namespace(r3, 0x0) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/mnt\x00') ioctl$FICLONE(r2, 0x40049409, r5) ioctl$FIOCLEX(r4, 0x5451) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) [ 679.577441][T26649] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 679.608917][T26654] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. 20:34:48 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:34:48 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0xe00000000000000) 20:34:48 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e23}, 0x1c) listen(r1, 0x200000000002) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000080)=0xe5) getsockopt$inet6_dccp_int(r1, 0x21, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) bind$rose(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r2, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0xf, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40011) 20:34:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB], 0x50}}, 0x0) 20:34:48 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) recvmmsg(0xffffffffffffffff, &(0x7f0000007f40)=[{{&(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003880)=[{&(0x7f00000003c0)=""/180, 0xb4}, {&(0x7f0000000540)=""/129, 0x81}, {&(0x7f00000026c0)=""/234, 0xea}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/184, 0xb8}, {&(0x7f0000000480)=""/87, 0x57}, {&(0x7f0000000600)=""/22, 0x16}], 0x7, &(0x7f0000003900)=""/4096, 0x1000}, 0x9}, {{&(0x7f0000004900)=@x25, 0x80, &(0x7f0000004a00)=[{&(0x7f0000000640)=""/39, 0x27}, {&(0x7f0000004980)=""/74, 0x4a}], 0x2, &(0x7f0000004a40)=""/146, 0x92}, 0x3}, {{0x0, 0x0, &(0x7f0000006d80)=[{&(0x7f0000004b00)=""/17, 0x11}, {&(0x7f0000004b40)=""/4096, 0x1000}, {&(0x7f0000005b40)=""/142, 0x8e}, {&(0x7f0000005c00)=""/29, 0x1d}, {&(0x7f0000005c40)=""/227, 0xe3}, {&(0x7f0000005d40)=""/39, 0x27}, {&(0x7f0000005d80)=""/4096, 0x1000}], 0x7, &(0x7f0000006e00)=""/86, 0x56}}, {{&(0x7f0000006e80)=@sco, 0x80, &(0x7f0000007f00)=[{&(0x7f0000006f00)=""/4096, 0x1000}], 0x1}, 0x1000}], 0x4, 0x1, &(0x7f0000008040)={0x77359400}) bind$alg(r1, &(0x7f0000008080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) [ 679.742620][T26665] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 20:34:48 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe0848", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:34:48 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) bind$rose(r0, 0x0, 0x0) [ 679.805384][T26672] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. 20:34:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB], 0x50}}, 0x0) 20:34:49 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x1000000000000000) [ 679.885903][T26677] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 679.915198][T26677] device macsec1 entered promiscuous mode [ 679.930736][T26677] device vlan0 entered promiscuous mode 20:34:49 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$AUDIT_GET(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100010}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3e8, 0x1, 0x70bd2a, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x1) ioctl(r4, 0x3, &(0x7f0000000000)="080db505cbfd4228dd0dbd17f7ce8000dd65160400cfe847a071") r5 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f00000002c0)={0x2, 0x0, 0x5, 0x8, 0x0, 0xff, 0x4}, 0xc) sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000080)="0304a25b45eb3ff6bd5318ac930a4bda51089cd0ee9f98841e7f6af2aac5f4ee5a7334241ad70b0a650b7e886a0718a931ed47e72cbc637f54c5271cec9f6d7df7e75fabc2545bd6ffa3e19d710cfb97ac84240c7d") 20:34:49 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:34:49 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe0848", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:34:49 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r1, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) bind$rose(r1, 0x0, 0x0) bind$rose(r1, 0x0, 0x0) 20:34:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB], 0x50}}, 0x0) 20:34:49 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x1100000000000000) 20:34:49 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r2, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x7, 0x3, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}]}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8000}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x58}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008004}, 0x80) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000001c0)={0x3, 0x3, 0x30, 0xf8, 0xda, 0x9, 0x8, 0x1, 0x5, 0x9, 0x3, 0x7f, 0x80, 0x8}, 0xe) [ 680.535942][T26701] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 20:34:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4a128c1aa7cf68a72e18b043723262ef1db17855e9b9c3c4f3d85375cfa53566d1bccb85f7297cb07953a21aa4f222f0b3883bb31e8a8f15e68f55716d40aae"], 0x50}}, 0x0) 20:34:49 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r2, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) connect(r2, &(0x7f0000000040)=@isdn={0x22, 0x3, 0x24, 0x40, 0x6}, 0x80) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f00000000c0)=0x1f, 0x4) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x7, 0x3ff}, 0xc) 20:34:49 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000180)={0x0, 'veth0_to_team\x00', 0x2}, 0x18) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r1, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(r3, &(0x7f00000001c0)='memory.swap.current\x00', 0x7a05, 0x1700) sendfile(r4, r2, 0x0, 0x8000000000004) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) bind$rose(r1, 0x0, 0x0) bind$rose(r1, &(0x7f00000000c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x5, [@default, @null, @null, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x40) r5 = socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8) 20:34:49 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x1500000000000000) 20:34:49 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x8000000000004) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8983, &(0x7f0000000080)) sendfile(r4, r5, 0x0, 0xf03b0000) r7 = openat$cgroup_ro(r3, &(0x7f0000000000)='cpu.stat\x00', 0x7a05, 0x1700) sendfile(r7, r1, 0x0, 0x8000000000004) setsockopt$ALG_SET_AEAD_AUTHSIZE(r7, 0x117, 0x5, 0x0, 0xfffffffffffffffa) r8 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) [ 680.688085][T26717] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 680.737004][T26717] device macsec1 entered promiscuous mode [ 680.762467][T26717] device vlan0 entered promiscuous mode 20:34:49 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x3400000000000000) [ 680.798263][T26717] device vlan0 left promiscuous mode 20:34:50 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:34:50 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x4000000000000000) 20:34:50 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe0848", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:34:50 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) socketpair(0x29, 0x3, 0x2f, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$rose(r1, &(0x7f0000000040)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @bcast, @bcast]}, 0x40) r2 = socket$inet6(0xa, 0x3, 0x9) sendto$inet6(r2, &(0x7f0000000ac0)="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", 0x1000, 0x400c004, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@hoplimit={{0x14, 0x29, 0x43}}], 0x18}}], 0x1, 0x0) bind$rose(r0, 0x0, 0x0) 20:34:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB], 0x50}}, 0x0) [ 681.448410][T26740] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 20:34:50 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x8000000000004) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000040)=r2) bind$rose(r0, 0x0, 0x0) 20:34:50 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x4002000000000000) 20:34:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB], 0x50}}, 0x0) 20:34:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000c80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="b80b000001050108000000000000000001000006540201000200000000000000d40e7d410500040073797a310000000000000000000000000000000000000000000000000000000080c3cac9f8bd4b26c28992fe5e99effbae4aaa6175f055bc46638fdb9840043120a085a244556e97a65f3d76f3dc4b070d6c002b8ab3ea33127e28d159074fec0600ff00030000000400000007006b8302000000070000000180270000000000030000001f00050000000000040000000800000103000000030000000600000803000000000000000400070001000000090000000600000002000000020000000300080002000000f9ffffff0300000000000000170000000900000003000000020000000000c0ff0200000003000000ffffff03010000000900000000f063ff02000000050000000100060002000000ffffff7f0800ffff03000000bd06000007008b0002000000ff0300005b00f6f3010000000600000004000100000000000800000001011f0002000000010000005a6905000000000001000000010002000300000001800000060000000000000000000000040004000100000004000000f7ff80000200000007000000010400000200000007000000000008000100000020000000ff070300d763cbdd05000000faff01000300000004000000feffc751020000008e0800000100020001000000080000000200040000000000c90700000200bd0d030000000500000001000004ac853f72070000000100ffff020000003f0e00000600040000000000590e00000500040001000000010000006f0a070000000000180d0000410065430000000001800000ff00000003000000030000005402010000000000e8e0c61d04082000c6020c0073797a310000000000000000000000000000000000000000000000000000000041944533eb9e8fe981acda399355d4d220e68aa334d89bba65529c51cfb13ec37abe08b07f5c079d325d0d3787cbbea78c1c7c94f5b484d229028bdb96529a680104090001000000070000000300030003000000ff010000ff7f05000300000000000080c700200000000000030000001f0000040200000000000000ff01450000000000080000008000050002000000070000000500f8510200000006000000050005000300000004000000080007000100000038e0bd590900010000000000090000003aff040003000000000000000700f7ff01000000010000000800030003000000070000000300018001000000010000000100f4ff01000000080000000800090001000000e408000005001f4102000000794c0000080001f000000000900000000100c500020000007f000000020001043e08abd0fa0c000080000104010000000200000000100008000000000200000002000300020000000600000000010001020000000300000007000000010000009f070000020000100200000001000000090099e301000000070000005a1b080003000000ffff00007f00030002000000010000000400050000000000010001000200ca2700000000ff00000038000000030000000300000005000800000000000900000000000800020000008bbb00000300490000000000000400000400176a00000000f7ffffffb90b46f503000000080000000e941f0000000000ff0100009c050100030000000000000054020100020000003f90000002ff01fcb800170073797a3100000000000000000000000000000000000000000000000000000000b0fca2ac464dc57afc0dfde05ad9c3364e9acefb7cb756d85892fd103e29e533d03318f9dcf9e65997ba90bdb5dc48b7f5b8f4de45f19db9dfa2da1ce05720970700000803000000ff0100000900020000000000070000001f00040002000000000000007c0008000300000000000100008048000300000000000000ffff060000000000030000000700000401000000050000003f000200000000000800000002000200010000003f0000000300040003000000ffbb00006142070000000000bc0500000300ff030200000007000000020024000300000068ffffff950004000300000001000000008009000200000008000000fa83ff0103000000050000008100030002000000810000000010000200000000502700000600010400000000ff0f0000400001000000000000000000f9ff070000000000030000000000b30201000000ffff0000ff03d60002000000050000001600df8c010000000500000004000400020000000500000074fa0700020000000100000040000010030000c2c654a1430bcb90150003000000d1e6a900020000000001000009000800000000000400000000000002000000000600000000000700000000000004000008000400030000000800000000001f0000000000030000000700050000000000ff0700000104ff7f000000002f00000040001f0002000000041000000700018002000000a03b000001000700020000000300000000000101020000000300000003000300000000000200000054020100010000000400000004b2008007001d0073797a300000000000000000000000000000000000000000000000000000000042926bfddbf129b85fe93fd2f5c4f8f3b0574294829fe7fd1017b338c3eeac10c043e4c4f3405940b55e6f1b68c495d2537a94a6add04e68404d03c9d5a58dce0100c38d00000000010400007f0003000200000001000100010041380000000005000000010006000000000000000000060005000100000006000000070009000100000026000000ff010100020000003f000000e42c030001000000846c00000900050001000000050000008100ff0300000000020000000000ff01010000001f000000fdbf300002000000040000003f001f0000000000040000000180080007000000000000000200060001000000000000802001000003000000960300000000008001000000f5a700000300060000000000ff0f000040c0070001000000ffffff7f7f000600010000007700000001003502429f9c18050000003a00030001000000070000000200000003000000fbffffff0101080000000000001000004f02080000000000060000007f00080000000000070000000180ff0301000000030000001f000200010000003f00000004000500020000003f000000060040000100000000000000fb97800001000000090000000600000100000000ffffff7f0900060001000000070000000902060000000000faffffff00006b0e000000000004000018f23f0000000000800000000500000200000000020000000100020000000000000000000300010002000000080000000300030001000000010100005402010001000000e5020000d87f05c601010a0073797a3000000000000000000000000000000000000000000000000000000000c6323949cd04d6e3fcae2f1f3e5ae3ccf59a02bad2459704a5d4e617122774e3a4b64f710e1af4b9241cbb06ec35d3bc7adf56744914e8653a6a0acba032994c0300a7fd030000003f0000000500060002000000ff0f0000010000bf000000000900000002006d0003000000080000000600530000000000ffff00000800040003000000ff0f00000700040001000000050000001b36080002000000000400000700030002000000050000000400080002000000edffffff000000000200000009000000000000000000000006000000ae00090001000000520000000004090002000000000000000000018003000000090000000000000401000000000000000010030000000000ff0000000500ff03030000000000000000500300000000000600000004000010030000005c000000ff07200001000000090000000600c85202000000030000000400060001000000fc9800000200ffff030000000001000008003f00030000007f0000000900200000000000030000002207400002000000010000007f001f0003000000030000001f000000030000000200000020007f0000000000ee000000d31f010102000000000000000600ca9100000000050000000300080003000000050000000200f9b701000000090000000600d0000200000008000000d4037d1003000000010000000000810002000000070000000000050000000000ff010000050004000200000006000000d00708000200000009000000"], 0xbb8}, 0x1, 0x0, 0x0, 0x91}, 0x4000000) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r1, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) bind$rose(r1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x8000000000004) getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f0000000280)=""/145, &(0x7f0000000180)=0x91) sendto$unix(r2, &(0x7f00000000c0)="2e7bea8014016069a18737aa062d858def14a9f227190ac31f858516068ceca6ff88d77b6e867a3c40a67ca0992541576362588802ca107d271fb77ce50ebe3b90bd30d1dc0d3cff43e1f0e85f4253bcb82a0ff2d321d5c5b3981fe6b138feaa05caaebeb5c0a36df7858d8ae200a6031606f579b7b5b6b6aa270620d907056ca9735967aa3d881b5b0749293e3297593a87aeebad66303a49846cad3c02d7469714db12aa446a2d64f5aa62dcc94c515d59ad8bb953506a84987385ea323e", 0xbf, 0x20000000, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e23}, 0x6e) r4 = socket(0x3, 0x800, 0x4c49) bind$alg(r4, &(0x7f0000000640)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-aesni\x00'}, 0x58) 20:34:50 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = socket(0xa, 0x1, 0x0) close(r4) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000000)={r6}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000000)={r6, 0x4}, 0x8) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r7 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 20:34:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB], 0x50}}, 0x0) 20:34:50 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b58", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 681.852912][T26772] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 20:34:51 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:34:51 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x9ac4200000000000) 20:34:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:34:51 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) bind$rose(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x800, 0x70bd2f, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x40800}, [@IFLA_PHYS_PORT_ID={0x18, 0x22, "3e1b3ca54fcf57b1038c864f81d875e5c10cc875"}, @IFLA_IFALIASn={0x4}, @IFLA_EVENT={0x8, 0x2c, 0x7}, @IFLA_PHYS_PORT_ID={0x7, 0x22, "76fac1"}, @IFLA_EVENT={0x8, 0x2c, 0x6}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x14}]}, 0x5c}}, 0x24) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0\x00', r3}) 20:34:51 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b58", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 682.344417][T26785] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 20:34:51 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0)=0x7, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r5, r4, 0x0, 0x8000000000004) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0x7, 0x4, 0x3d0, 0x200, 0x200, 0x200, 0x2e8, 0x2e8, 0x2e8, 0x4, &(0x7f0000000180), {[{{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0xff, 0xbd, {0xffffffffffffff80}}}}, {{@arp={@loopback, @multicast1, 0xffffffff, 0xffffff00, 0x4, 0x8, {@mac=@broadcast, {[0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x8, 0x1, 0x40, 0x2, 0x2, 0x2, 'wg0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x0, 0x4}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "a730ddd029feb6390a779c6c96b7f363899833a8596092debb483c8c103c"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x20}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x420) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f00000000c0)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f0000000100)=0xffffffffffffffff, 0x12) sendfile(r2, r1, 0x0, 0x8000000000004) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000000)={0x1, 0x6, 0x8, 0x9, 0x12a}) bind$rose(r0, 0x0, 0x0) [ 682.385965][T26785] device macsec1 entered promiscuous mode [ 682.415197][T26785] device vlan0 entered promiscuous mode 20:34:51 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0xe803000000000000) [ 682.439884][T26785] device vlan0 left promiscuous mode 20:34:51 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB="0300000051d0bc568c084a009f03739ef72f374912913c4ed45ddf0034c81bd612347d48f62215db90f494dd91281b88fa0323e1cfc562b3329151ea282c2540edd06a94fd98153cf688c26424ea0806f561bf8d041d848b0bab1fa3c0a55967c98dd0f9f69a046f5de714d93f4c35eddeb0ff4bb85e9b05914272dcc95d6afe29f64c916d527bafe380b7ea9798ad8f1c8111b57f1054ae", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000040)=0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) r2 = accept(r1, &(0x7f00000003c0)=@phonet, &(0x7f0000000440)=0x80) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00') sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f00000006c0)={0x794, r3, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_BEACON_TAIL={0x9d, 0xf, "dcb66107a81ed7f03697570bcd29a76acb268c44cb8cb577fe8dd74ae03d6a2938928c75e0eb556483e3b695b3099934d297ec8fe58001149a98046f8dfc679b58f92b6fbd54b39e5bfc294067503ee7fd506e03a0718a878acdd6d7e05c5f8ec3b4523c4b15bc2812fca75ae54b170ad8fb59f65fec1138677b02b8d6c72f3bbcd411886b0c2c5b3e3179e4d83ad6e6cc270c433fd97703b5"}, @NL80211_ATTR_BEACON_HEAD={0x6ba, 0xe, "a39bb51ebc1c16cab3a61c480299dd6104b554dfc5ff64a852f156dfc5051816d938cc241033ce17a7b33454feba8b8c082f7a4602126844418533a10e0ebb757e5de466cbfd332102e203689e0acd9a20fb3a649729d56943bb4752f918ab488430009106c2ad875302cc7d9d8a2f0a47fce08546779b922c2ee33e08ba0d083b7a13e4a77260eb6638e4081e8d75efc5a794693be62322ef8c8a9939b587632872110ea1e03a1ba05262f5866d1a710ea750feb0a45c7810d19ddff2abfaf1ce585881441b7db6d85b892c63e9a7602dc728f0347b4c063ba339f52e432a183fa1173008946a5a2e8a90de48cb5b0ccce4ef99826e300d2b03932c17698cc10ff84c4c3010440c014de452c82072ddee8ea3bb141edba4ced12aa853adb98022aa0ebca952cf5d9eecf5c63dad19f256266eb902c03319d0064f39e6412c685565997870f95ffab29301e2848ec6a60c160b74824d0ee8a11236b13977a54f985e08f740d57db285a8e7933cb98a21b845663221c0a47f0f8274f991c8d337b43c95bded54f3a15019b4206783e93591dee2f04d2e0425e68a32792017b145af475bf879c28fb452660605e84b606203c94abc7124309a5079d17b4dbfd5f62870aff81d8795921067dc6a099a16c5185b9c230ef9927b43b0a56a69ce12dff2ba3d08dc8ae0d0e9f138ecfec877fcaf2c30fcb00aa905f233f91ddab067b305f854adee350c8b0a5544fa7d555089127efcecbebb97cfd9d725c4af28af359141cbefd1d046eea0762c0ff36bb7927c7ba06ea9ba8b37d8a1a5cc8d6ce9d6c667aedac62f1c714b49ea2874bd28f88f61a8d952e8fc14c9c8669992fc596a41c235c8909817c28ebe5a394b16d9aa05ec3dcef6a57dd0a4dc87ac9855cf645a84697766efd84c3344d773b41c54db672f8397d05699342784bac22f23f967937544aeed81500607eaf2d183edb2d240eaacf3224e2cd27099b8ff1d9493e493045a507f1eac839d1cf76e067dc91df308f5f570b919c1c0f3a6e52516a252402b4043956ee5f9b428b9c4f8dfbdd887872378eeffaccf5c738a72a2862ca06fc13bd2dceb25495855287f8bf521755b55f704514bae1d5ca73436a678471fe16aff40073b71702a630389ae5688ddfdb932ff6b1ed78291d96b5b531d83f73393aca8031414bac1697fed97e879b6bab6013149f63c4775df760191007f37f1dbaed9e997f4fe62ad1a2eba04d948f9e57e49e66c3ce694b866aee60597fb5413a9e721c5031cbd9aa2c55ab147258ac93e6c379909a852827dbeb4e084a94100a7f3902f504bc828673f51f6c9057e9eeac7fbfc69f2183e9c2c48293d4a3049e1edc89f00b17b572cf5b8a8b54c29f9367b11249ebb0611168836d9b57e5989c6e34a635a6ada75130e690e4c3431231c8d729994cc83e7a1d9dba9256d20e37f9c3b7eb4ff36627973bd02e93069b97dacf60d8575c229d1763e61ec49e50a4e158be7debe8439123ed1bd3e607b7e8d0d399ab7b420d0ce6d57c1357b973ac20e894ceec174cac66a23ca19332364905cb2ac1907edba87599eff9b7eae0f63f0675682479cbadaf357e28991b6edc86c948066ced58772c9566a3a6b89c4d54f1a2d5add5cc0c859199e971377f48253a2adfddbbd62662f3143870e8c39a3059b530b54f13caaf17bddd9140bead9fadb8d4319142fc2f93caa600bc7b3667b5f12bff7b07377e84321d342376e18d8924670a58d0304c54a870c10d093709c6be970d100dd85caa48ab41caddc219639e49882ee953843316275e0aa75d1090fc3a09cb776b825c68e7b6658ccd6a2ea67502499ee62970751e67c34c40afdcba2912392ba97d7f4087ee052db00becea5a89fb12b1e3755730f7e8bbbc2237c1f946bdcda95c64d1599bd02bab2b10e361b4b35fe3d68f14f6a89f45e366d47d8f6715d163a124fbf74f7d4a613b53b1573dfefd1f1806b9e026bfcb62dd0a806f19131d910201fdf473725bcc4406ef1afecb6c81b1b779d95cba7239d8668b667be453c50fe17abf942c48e6aecfbd89b8133673e3cf1fb15caefb9c3c391cf8ba6c72e5d7dfe16f25af145fd4ce79cf853b016215eeeda1d2856e1553a9e95622d3f30c85e7692ad97d90fffa8367492c2547d9b39ab2934f61d55d0b1c58a3061ab56d58939fb67f47e943ccc0678b5b9da53a2004e04d8acb03ab99f42eb19cc7cc5e41b3fbd9d0f766a3f1c21695e9835a842cdb1a986d86918be4b22290f8314c5398745a1a740a2a74934bd11ec18527db371707282b9a08256ee2fc23551aeae72fa6ada7fd443720a2d7bcd4db99a2e8c78733b085a0122bb9f9c1ad4f818010fc23daafe7ee98ac3676b5fba1261004668e1555bde71e7cb4e8c5db223b67c323ee691d0b82f387f503281"}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x24, 0x49, [0xfac08, 0xfac01, 0x147201, 0xfac09, 0xfac09, 0x4, 0xfac0a, 0xfac0a]}]}, 0x794}, 0x1, 0x0, 0x0, 0x4000080}, 0x40) 20:34:51 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0xf401000000000000) 20:34:51 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) bind$rose(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r1, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0xffffffffffffff00) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r2, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x3f2, 0x20, 0x70bd25, 0x25dfdbfd, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x200400c4}, 0x20008000) 20:34:51 executing program 0: ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x8000000000004) r4 = openat$cgroup_ro(r2, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) getsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) 20:34:51 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0)=0x7, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r5, r4, 0x0, 0x8000000000004) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0x7, 0x4, 0x3d0, 0x200, 0x200, 0x200, 0x2e8, 0x2e8, 0x2e8, 0x4, &(0x7f0000000180), {[{{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0xff, 0xbd, {0xffffffffffffff80}}}}, {{@arp={@loopback, @multicast1, 0xffffffff, 0xffffff00, 0x4, 0x8, {@mac=@broadcast, {[0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x8, 0x1, 0x40, 0x2, 0x2, 0x2, 'wg0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x0, 0x4}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "a730ddd029feb6390a779c6c96b7f363899833a8596092debb483c8c103c"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x20}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x420) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f00000000c0)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f0000000100)=0xffffffffffffffff, 0x12) sendfile(r2, r1, 0x0, 0x8000000000004) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000000)={0x1, 0x6, 0x8, 0x9, 0x12a}) bind$rose(r0, 0x0, 0x0) [ 682.997018][T26788] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 20:34:52 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:34:52 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x6, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241baff60005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67a000059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x4d, 0x44070, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) 20:34:52 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r1, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}]}, 0x24}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r3, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe44}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004804}, 0x20044040) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc760e55f4e9e70bc111c8afb7f0000000000004e0000", 0x18) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xff}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa00}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x48081) 20:34:52 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0)=0x7, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r5, r4, 0x0, 0x8000000000004) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0x7, 0x4, 0x3d0, 0x200, 0x200, 0x200, 0x2e8, 0x2e8, 0x2e8, 0x4, &(0x7f0000000180), {[{{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0xff, 0xbd, {0xffffffffffffff80}}}}, {{@arp={@loopback, @multicast1, 0xffffffff, 0xffffff00, 0x4, 0x8, {@mac=@broadcast, {[0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x8, 0x1, 0x40, 0x2, 0x2, 0x2, 'wg0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x0, 0x4}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "a730ddd029feb6390a779c6c96b7f363899833a8596092debb483c8c103c"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x20}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x420) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f00000000c0)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f0000000100)=0xffffffffffffffff, 0x12) sendfile(r2, r1, 0x0, 0x8000000000004) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000000)={0x1, 0x6, 0x8, 0x9, 0x12a}) bind$rose(r0, 0x0, 0x0) 20:34:52 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b58", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:34:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:34:52 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r1}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f00000002c0), &(0x7f0000000300)=0x4) recvmsg$can_raw(r2, &(0x7f0000000280)={&(0x7f0000000040)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000100)=""/12, 0xc}], 0x1, &(0x7f0000000180)=""/209, 0xd1}, 0x60000001) 20:34:52 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x37}, 0x1, 0x0, 0x0, 0x20000004}, 0x24040011) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000040)) [ 683.340734][T26839] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 683.398525][T26839] device macsec1 entered promiscuous mode [ 683.416060][T26839] device vlan0 entered promiscuous mode [ 683.447434][T26839] device vlan0 left promiscuous mode 20:34:52 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0)=0x7, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r5, r4, 0x0, 0x8000000000004) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0x7, 0x4, 0x3d0, 0x200, 0x200, 0x200, 0x2e8, 0x2e8, 0x2e8, 0x4, &(0x7f0000000180), {[{{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0xff, 0xbd, {0xffffffffffffff80}}}}, {{@arp={@loopback, @multicast1, 0xffffffff, 0xffffff00, 0x4, 0x8, {@mac=@broadcast, {[0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x8, 0x1, 0x40, 0x2, 0x2, 0x2, 'wg0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x0, 0x4}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "a730ddd029feb6390a779c6c96b7f363899833a8596092debb483c8c103c"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x20}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x420) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f00000000c0)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f0000000100)=0xffffffffffffffff, 0x12) sendfile(r2, r1, 0x0, 0x8000000000004) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000000)={0x1, 0x6, 0x8, 0x9, 0x12a}) bind$rose(r0, 0x0, 0x0) 20:34:52 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r3, r2, 0x0, 0x8000000000004) r5 = socket(0xa, 0x1, 0x0) close(r5) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000000)={r7}, 0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000000)={r7, 0x0, 0x9}, 0x8) sendto$inet(r1, 0x0, 0x0, 0x40004, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) socket$phonet(0x23, 0x2, 0x1) 20:34:52 executing program 5: pipe(&(0x7f0000000380)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e1f, @remote}, 0xfffffdad) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100)='NLBL_CIPSOv4\x00') setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000500)={0x1, 'macvtap0\x00', 0x2}, 0x18) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="b4dee300", @ANYRES16=r3, @ANYBLOB="00032bbd7000fddbdf25040000004c00048005000300050000000500030007000000050003000000000005000300000000000500030000000000050003000500000005000300000000000500030007000000050003000100000008000200030000004c000c802c000b8008000a00da2d000008000a00416d000008000900b321d438080009006715f96108000a00f25a00001c000b8008000a001e7d000008000a0077ed000008000a000dcf0000"], 0xb4}, 0x1, 0x0, 0x0, 0x40000}, 0x24048800) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r4, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') r7 = socket$inet(0x2, 0x3, 0x4) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f00000001c0)={0x0, @local, @local}, &(0x7f00000000c0)) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="110700000000000000000b00000008000300", @ANYRES32=r8, @ANYBLOB="99733b1a480583370a933e084967ba058408000000000000009d3ab09ab55f667fad67ebe8ef0e0aa691abb9625ce6186cc2a76beb3286da9efb96e91c2c82b099f39cba26c5db070795b1fe40aeee000049b6b09e5a25e0df597645abe9d841c3dcc7db59eea1b1b1749957c97012"], 0x1c}}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="040028bd7000fcdbdf2512000000060028000100000005002f0001000000080034953105ab9dbbf7fb9df700ff07000008003b000700000008003b00ffffff7f08002b000800000008003900090000000500350009000000"], 0x54}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000800) sendto$inet(r0, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) 20:34:53 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) [ 683.905953][T26845] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 20:34:53 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:34:53 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) 20:34:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB], 0x50}}, 0x0) 20:34:53 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:34:53 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x14, r4, 0xdaa3b002485c5b6d, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) recvmsg(r3, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x0) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r5, 0x20, 0x70bd28, 0x25dfdbf8, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4bd}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x10000) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r5, 0x100, 0x70bd2b, 0x25dfdbff}, 0x14}}, 0x2c001) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) sendfile(r7, r8, 0x0, 0xf03b0000) sendfile(r7, r6, 0x0, 0x8000000000004) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x50421280}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r5, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000}, 0x4000400) [ 684.217775][T26877] __nla_validate_parse: 8 callbacks suppressed [ 684.217783][T26877] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. 20:34:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB], 0x50}}, 0x0) [ 684.266818][T26881] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 20:34:53 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000280)={r2}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') getsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f00000002c0)=0x9, &(0x7f0000000300)=0x1) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x80000002, 0xf) [ 684.325353][T26891] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. 20:34:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB], 0x50}}, 0x0) 20:34:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00"], 0x50}}, 0x0) [ 684.420839][T26897] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. 20:34:53 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:34:53 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e23}, 0x1c) listen(r2, 0x200000000002) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000080)=0xe5) setsockopt$inet6_buf(r2, 0x29, 0x2f, &(0x7f0000000000)="b7b77423b3256e6eeea7d4cfb73c43df16759c51059b78844ec70da6fcbc2b505644aa8bbb8209c5a74f68d5c8e33b96a7db422f34601a9c203b78014d6738f91eb47b224522e430de335f1b8a112985117aec5a7c786fb2dbfb6cd655da2abe510bcdde1fbaa1114b8282aa8199b9f763225e7369396d0da35ee962961224275f311e715780659348ea20fbe01b5584fe41eae889704cc8ddc40c5e49aa3a53cb209c78f5210153b99ee212bbc1f63173f7a5", 0xb3) [ 684.526535][T26902] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 684.711751][T26904] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 20:34:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00"], 0x50}}, 0x0) [ 684.828698][T26914] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 20:34:54 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:34:54 executing program 2: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0xe803000000000000) 20:34:54 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x34, 0x1, 0xa, 0x0, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x8000) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_ro(r1, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r5, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r5, 0x0, r0, 0x0, 0x7fffffff, 0x0) 20:34:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00"], 0x50}}, 0x0) [ 685.157433][T26920] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 20:34:54 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:34:54 executing program 2: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0xe803000000000000) 20:34:54 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) accept4(r0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000053c0)=[{{&(0x7f00000000c0)=@un=@abs, 0x80, &(0x7f00000016c0)=[{&(0x7f0000000040)=""/27, 0x1b}, {&(0x7f00000001c0)=""/10, 0xa}, {&(0x7f0000000200)=""/138, 0x8a}, {&(0x7f00000002c0)=""/29, 0x1d}, {&(0x7f0000000300)=""/109, 0x7a}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f0000000380)=""/86, 0x56}, {&(0x7f0000000400)=""/216, 0xd8}, {&(0x7f0000000500)=""/97, 0x61}, {&(0x7f0000000580)=""/177, 0xb1}], 0xa, &(0x7f0000000640)=""/38, 0x26}, 0x1ff}, {{&(0x7f0000001780)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000002900)=[{&(0x7f0000001800)=""/185, 0xb9}, {&(0x7f00000018c0)=""/16, 0x10}, {&(0x7f0000001900)=""/4096, 0x1000}], 0x3, &(0x7f0000002940)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000003940)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000039c0), 0x0, &(0x7f0000003a00)=""/52, 0x34}, 0x100}, {{&(0x7f0000003a40), 0x80, &(0x7f00000040c0)=[{&(0x7f0000003ac0)=""/123, 0x7b}, {&(0x7f0000003b40)=""/201, 0xc9}, {&(0x7f0000003c40)=""/151, 0xffffffffffffffa1}, {&(0x7f0000003d00)=""/162, 0xa2}, {&(0x7f0000003dc0)=""/206, 0xce}, {&(0x7f0000003ec0)=""/29, 0x1d}, {&(0x7f0000003f00)=""/137, 0x89}, {&(0x7f0000003fc0)=""/104, 0x68}, {&(0x7f0000004040)=""/85, 0x55}], 0x9, &(0x7f0000004180)=""/92, 0x5c}, 0x3ae5f3fc}, {{&(0x7f0000004200)=@ipx, 0x80, &(0x7f0000005340)=[{&(0x7f0000004280)=""/17, 0x11}, {&(0x7f00000042c0)=""/67, 0x43}, {&(0x7f0000004340)=""/4096, 0x1000}], 0x3, &(0x7f0000005380)=""/62, 0x3e}, 0x5e5}], 0x5, 0x2, &(0x7f0000005500)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r5, r4, 0x0, 0x8000000000004) r6 = socket(0xa, 0x1, 0x0) close(r6) r7 = socket$inet(0x2, 0x80000, 0x6) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r6, 0x84, 0x79, &(0x7f0000000000)={r8}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000005580)={r8, 0x7}, &(0x7f00000055c0)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000005600)={r9, 0x1, 0xfff}, 0x8) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4040047}, 0x2004c049) 20:34:54 executing program 5: sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)={0x108, 0x4, 0xa, 0x101, 0x0, 0x0, {0xc}, [@NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x88, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'tunl0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'vlan1\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x64df9b93}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x13deb430}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_team\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x29fa3c71}, @NFTA_HOOK_DEV={0x14, 0x3, 'bond_slave_0\x00'}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}]}, 0x108}, 0x1, 0x0, 0x0, 0x2404c000}, 0x20004001) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) 20:34:54 executing program 2: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0xe803000000000000) 20:34:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe0848"], 0x50}}, 0x0) [ 685.363082][T26929] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 20:34:54 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = accept$inet(r0, &(0x7f0000000040)={0x2, 0x0, @private}, &(0x7f0000000080)=0x10) splice(r2, &(0x7f0000000000)=0x4, r3, &(0x7f0000000100)=0x9, 0x1ff, 0x2) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) 20:34:54 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000756fffaeceaa24dd85be520a3d816f8b24d2e7a9103f2df844ae1c047559805c6ffcae10a1d8b53dcde58f2e8206a497f29b45f277c06702383f3bc82aea00857876831d5da672d1d388332db274b2e4df6f17104fe3ae6077aa2a2c1529b9128326832d5c22aafe39a3c8949bb4133f53fa547e6ee6553f92dae7ef2d03f437e72e4dcc0de6f2a0ba2a52603dda060741b9f295faffe1ffb6595a70f68c4aa5d8ee5dd8304150", 0xbf) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) [ 685.479237][T26951] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 685.500507][T26951] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 685.517857][T26951] device macsec1 entered promiscuous mode [ 685.539047][T26951] device vlan0 entered promiscuous mode 20:34:55 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0xc) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 20:34:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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"], 0x50}}, 0x0) 20:34:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe0848"], 0x50}}, 0x0) 20:34:55 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9ca", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:34:55 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:34:55 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) socket$rxrpc(0x21, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) [ 686.031558][T26965] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 686.041895][T26965] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 686.076731][T26966] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 20:34:55 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r1, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) write(r1, &(0x7f0000000000)="e0628c816d86cf874725670253ca934b372a3f55b0c844ffa4f00097dc3ea0361fe0104f46f3f8b524f2d350cbc3f3907a85c4da026c56b9c4aeaab7ffc9050bcc125676a04cce7cdb01462b2812e04fae0f1b0b32062c614edf38959d85ad0349c47d41176e1f246eaf41c5e8625f49954f263356e38d9d23aea4087510f3dc25c0ea9f823a70988aae17bc3c86967b1bd35e50860add990675ab6f1e208aea18f7e7647fed63775a442a4b41df", 0xae) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000000)=0x40000, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x1000001, 0x4) [ 686.134180][T26971] device macsec1 entered promiscuous mode [ 686.147014][T26971] device vlan0 entered promiscuous mode [ 686.170547][T26971] device vlan0 left promiscuous mode 20:34:55 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x5, 0xfffffffc) epoll_pwait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000300)={[0x7e]}, 0x8) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r3, r2, 0x0, 0x8000000000004) r5 = openat$cgroup_ro(r2, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x24, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}]}, 0x24}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0xc0, r7, 0x12, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x95}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xd658}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3fe}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4081}, 0x4) 20:34:55 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_user\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x8000000000004) bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 20:34:55 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9ca", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:34:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe0848"], 0x50}}, 0x0) 20:34:55 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x8000000000004) r4 = socket(0xa, 0x4, 0x0) close(r4) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000000)={r6}, 0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={r6, 0x8}, &(0x7f0000000040)=0x8) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 20:34:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4a128c1aa7cf68a72e18b043723262ef1db17855e9b9c3c4f3d85375cfa53566d1bccb85f7297cb07953a21aa4f222f0b3883bb31e8a8f15e68f55716d40aae2130362bc729067a2c18ab1d030fec56022b3ed49a32965d048e33836476967ed3c42524afa00cc95b8b1bd067d02f67da010df77addc64711eb3b771464ded7467a586a825be4a7edbb278663c325af5e83e40a3b1b721b5fd06c0500279e00f3b4768d6ebe10ee02f6b2e7f55de781d27c9588c2cc3bb100589391f51e"], 0x50}}, 0x0) [ 686.829107][T27004] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 20:34:56 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:34:56 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r2, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={0x2c, r4, 0x401, 0x0, 0x0, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}}, 0x2c}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r4, 0x800, 0x70bd2d, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x40) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) [ 687.094709][T27022] device macsec1 entered promiscuous mode [ 687.120555][T27022] device vlan0 entered promiscuous mode [ 687.153677][T27022] device vlan0 left promiscuous mode 20:34:56 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) sendto$inet(r3, &(0x7f0000000240)="0c268a927f1f6588b967481241ba7860005cf65ac6180000000000000005cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba4447a6d9fcb17967b0c5d796d8fc21f07bf2d9c2cbb92ae1a3beab0c7e6270665dd5001c76a7649f1801f039426faf2f756d5c92b498b4a81d628e8c8f4e6824f21cc37530f5b8cb2f4e1f587e86a81f0e2ee1d8243382862724954b43f09fc4d72c576b5a5e5630ff736c50c823a5b1914d458bb5", 0xc2, 0x4000055, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) 20:34:56 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="541a13b189d9897d8009fdc09367071dee158edcb7925d8e9d80210a215bac38961e2ccdd3c7dc7f43b06acf0500010000000d1c6fe5351d364e4a5164f7e7655391038db0dd07340798bf229d62b181041de899270600bec800080000706d8428fc0a01", 0x64) syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 20:34:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b58"], 0x50}}, 0x0) 20:34:56 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9ca", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:34:56 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x4, 0x12) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000000004) r1 = socket(0xa, 0x1, 0x0) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000000)={r3}, 0x8) r4 = socket(0xa, 0x1, 0x0) close(r4) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000000)={r6}, 0x8) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000000)={r3, 0x0, 0x6, 0x1ff, 0x8, 0x8, 0xc2f0, 0xff, {0x0, @in6={{0xa, 0x4e24, 0x5, @private0, 0x18}}, 0x1ff, 0x0, 0xe865, 0x40, 0x1}}, &(0x7f00000000c0)=0xb0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000100)={r7, 0xffff}, 0x8) r8 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) [ 687.416846][T27041] validate_nla: 4 callbacks suppressed [ 687.416855][T27041] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 20:34:56 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = socket$caif_seqpacket(0x25, 0x5, 0x4) accept4(r1, 0x0, 0x0, 0x800) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r2, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r3, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$netlink(r4, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f0000000000)={0x0, 0x2b, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4000041}, 0x80) [ 687.466162][T27042] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 20:34:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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"], 0x50}}, 0x0) [ 687.586558][T27059] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 687.600899][T27059] device macsec1 entered promiscuous mode [ 687.608402][T27059] device vlan0 entered promiscuous mode [ 687.617341][T27059] device vlan0 left promiscuous mode 20:34:56 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r1, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100124}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x140a, 0x2, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40440}, 0x80) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 20:34:56 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000200)='cgroup.stat\x00', 0x7a05, 0x1700) sendfile(r2, r0, 0x0, 0x8000000000004) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000080)=0x8, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0x8000000000004) ioctl$PPPIOCSMRU(r4, 0x40047452, &(0x7f0000000000)) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r7, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000240)=@req3={0x3ff, 0x81, 0x3f, 0x7, 0x7, 0x3, 0x9}, 0x1c) r8 = accept(r7, 0x0, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r8, 0x84, 0x1b, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="2d17e8340000749e26d0a01d3d6fe666e8b01daa3098355081126db8365f093382cc1317e728786b4fb07a15b92a652dbd"], &(0x7f00000001c0)=0x35) socket$inet(0x2, 0x6, 0x3) 20:34:56 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:34:57 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:34:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b58"], 0x50}}, 0x0) [ 687.889745][T27075] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 687.910941][T27075] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 687.995154][T27079] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 20:34:59 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:34:59 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) connect$x25(0xffffffffffffffff, &(0x7f0000000100)={0x9, @remote={[], 0x1}}, 0x12) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) bind$alg(r4, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r5 = accept4(r0, 0x0, 0x0, 0x0) sendto$llc(0xffffffffffffffff, &(0x7f0000000000)="5ead29366240c465a03e950992c5df0e525155df2aaadb5039336d9d09267cf0b234283c386d79b2311baabc54315a58b49800a70cbbb8298eb1bce31268aea7cb6e8c0560b478fd3ceac59820a0bb7bd94b2b3eaeda7e6d800dda4814d27b03d209feaf58a96ccbe153966e8462be6889c82d8993240902d80cc490cc2019943a305dd93cdefd37d8ac32c327cbf4ec5eeb252fa635b02fd3605c7148832310cb1f1a", 0xa3, 0x4110, &(0x7f00000000c0)={0x1a, 0x304, 0x2, 0xfc, 0x1d, 0x8, @remote}, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 20:34:59 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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"], 0x50}}, 0x0) 20:34:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b58"], 0x50}}, 0x0) 20:34:59 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x5, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x4d, 0x44870, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) 20:34:59 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) [ 690.430386][T27091] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 20:34:59 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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"], 0x50}}, 0x0) [ 690.474225][T27095] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 690.487791][T27095] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 20:34:59 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r3, r2, 0x0, 0x8000000000004) ioctl$sock_netrom_SIOCDELRT(r3, 0x890c, &(0x7f0000000000)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x388, 'syz1\x00', @default, 0x6aa2, 0x8, [@null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @default, @default, @null]}) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) 20:34:59 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:34:59 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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"], 0x50}}, 0x0) [ 690.610661][T27110] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 690.626172][T27110] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 20:34:59 executing program 2: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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"], 0x50}}, 0x0) 20:34:59 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:34:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0"], 0x50}}, 0x0) [ 690.856122][T27121] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 20:35:00 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0xfffffffffffffec3) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) getgid() 20:35:00 executing program 2: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4a128c1aa7cf68a72e18b043723262ef1db17855e9b9c3c4f3d85375cfa53566d1bccb85f7297cb07953a21aa4f222f0b3883bb31e8a8f15e68f55716d40aae2130362bc729067a2c18ab1d030fec56022b3ed49a32965d048e33836476967ed3c42524afa00cc95b8b1bd067d02f67da010df77addc64711eb3b771464ded7467a586a825be4a7edbb278663c325af5e83e40a3b1b721b5fd06c0500279e00f3b4768d6ebe10ee02f6b2e7f55de781d27c9588c2cc3bb100589391f51e"], 0x50}}, 0x0) 20:35:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0"], 0x50}}, 0x0) 20:35:00 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:35:00 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:35:00 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 691.350818][T27133] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 20:35:00 executing program 2: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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"], 0x50}}, 0x0) 20:35:00 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:35:00 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x7a05, 0x1700) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0xf000) sendfile(r6, r7, 0x0, 0xf03b0000) sendfile(r6, r1, 0x0, 0x8000000000004) bind$alg(r6, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r8 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 20:35:00 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f00000003c0)={0x2, 0x4e22, @remote}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f0000000000)) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) 20:35:00 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:35:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 20:35:00 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) r2 = socket$caif_seqpacket(0x25, 0x5, 0x4) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)="c761b46bced52d4e9e28480271328d2b86ae95663652c10e997a23fc0b20ec235cab9ea34390dddcf417af12cdf6ff25204e303ae56eedc11977fb1f82fe5f9d3e6c41e6627ba9ffc10e5d73e2b0a801762ac3d4a2369126c5cf0c25623d9198dd5601b502828ae5b0a01bfa5352878725702eb37798fbc6a391d2f2f9850fad377ddaf8d4873c4d12c44d524b68fa995a39a2e71832e9e7a91eb34e", 0x9c}], 0x1) 20:35:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0"], 0x50}}, 0x0) 20:35:00 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:35:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 20:35:01 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:35:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 20:35:01 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) getpeername$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c) 20:35:01 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:35:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9ca"], 0x50}}, 0x0) 20:35:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) [ 692.241069][T27179] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 20:35:01 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:35:01 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = socket(0xa, 0x1, 0x0) close(r3) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000000)={r5}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x80f4, 0x8, 0x0, 0x3ff, r5}, 0x10) r6 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) [ 692.365216][T27196] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 20:35:03 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:35:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 20:35:03 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x8000000000004) bind$alg(r2, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0xffffffffffffff2a) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340)='l2tp\x00') r4 = socket$inet6(0xa, 0x4, 0x3) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r3, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r4}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6gre0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040801}, 0x20000000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r5 = accept4(r0, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r6, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r8 = socket$netlink(0x10, 0x3, 0x0) ioctl(r8, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_BSS(r8, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r9, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40891}, 0x4850) sendmsg$NL80211_CMD_STOP_AP(r6, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000002840)={0x1bec, r9, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_BEACON_TAIL={0x724, 0xf, "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"}, @NL80211_ATTR_TX_RATES={0x2e8, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x98, 0x3, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, "08c392bb29d8b1d8fc767e7d4feadaf4b7bbb25f2e67b593d8"}, @NL80211_TXRATE_HT={0xd, 0x2, "36970396532ca7889e"}, @NL80211_TXRATE_HT={0x18, 0x2, "34f6f6d4caafaa576645756af1a73a862c3518ca"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x58ae, 0x5, 0x3, 0x9, 0x0, 0x3, 0xee5e, 0x5]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, "a232225b9130a94d0288022a7ebc10ed"}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, "237fab98e81bfa66aaabafb7a54d237da1b9fded92d7aa"}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1, 0x7, 0x401, 0x7f, 0x7, 0x4, 0x200]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7546, 0x7, 0xe102, 0x7ff, 0x64a, 0x1, 0x3, 0x1]}}]}, @NL80211_BAND_5GHZ={0x40, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x3, 0x1, 0x4, 0x9, 0x8, 0xf6, 0x2]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, "a571"}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HT={0x8, 0x2, "23cbad42"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x80, 0x7f, 0x42, 0x3f, 0x9193, 0x1, 0x7]}}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xbd5, 0x80, 0x401, 0xfaae, 0x6, 0x0, 0x9, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xad7d, 0x8, 0x200, 0x47e, 0x9975, 0x401, 0x34, 0x9]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, "e7e09b9854ac94e527b396"}]}, @NL80211_BAND_2GHZ={0xa4, 0x0, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, "92954639f0c9b475e0fdb90d935fc3fc21cfb3092084ca51"}, @NL80211_TXRATE_LEGACY={0x11, 0x1, "cff63b9f62a2f411a89c1fc93c"}, @NL80211_TXRATE_HT={0x45, 0x2, "15838da050c48941ebe00553fdb1b4ee72e044d0c6fb7c863f301148fe3e6b48a323631e3e6d6d316564dd5ae17db6244080faecbb79784fdc889d04689ece155f"}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, "a94eecb2d942592044571b5980cd821bdaee15084ba6159800"}]}, @NL80211_BAND_2GHZ={0x28, 0x0, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7, 0x1, 0x401, 0x2, 0xf3b1, 0x0, 0x5c8c]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x28, 0x2, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xe57f, 0x4, 0x81, 0x0, 0x7, 0x205, 0x0, 0x9]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, "a77cca795afeb129e9ad33"}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0xb1, 0x20, 0x8, 0x7, 0xe0c, 0x0, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x2b, 0x2, "45a4a71fea1017fe3f1125128aecc71f9044e8bba87ad179d9def55d3856223d6da49e0e3316ab"}]}, @NL80211_BAND_6GHZ={0x64, 0x3, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x18, 0x1, "ada59d68999f927c49bf254c9d9a869a0f107f34"}, @NL80211_TXRATE_HT={0x35, 0x2, "98ccebb17c7bf7356615f8d0c1bb198df1ca040ae0bb9488ad1ebf532f88426a3455df3b7e69056cb8d85484412d424be1"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_FTM_RESPONDER={0x1114, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x100a, 0x3, "d7e41d9022bd1daa737c799cb95af2f2e47303037ab06af331bbdf9e534a4cb7fcc62fc306ad9e13715fc14979c326ba2b6ff7ad9e87fe166a2e02a5dbe2754d800b3665fcb9c1a2be3f9ca4d543b168270380d8ea30deee5e885a957a401099358012f48322735c55e28c3c778109747b4377f93d370b45140beb2f8b1eb00ba1151e20e6abb1ede68afc79488675a0b208afd3b4ddbf1df5120b864d974b3ffbcfea7d987550834f64a795ec0f24801e50f54651030b59a95043f1dd3cc3bcfdc3b5c7784764066276fe2e61dde959f44ba9fd5d7ff65be0b7970693cbfe9d3de995971d9a07846812e1fd593322a8ca398951a2103df96d7ed3730c342fb8e91e72bcd3725cb8adf9985df5e9971d2bd8391f3e66aaff40e9df2bdd5353c1f1f467cce7183630d5234e9325ec33a2b6656bffa14a5e4d20242e3bd11ca2edccc4b0957436cc88e4ce276e7a325f2c0c1306d67df199cd0f662c43eb0b4ebde53c84d4fa46e489d4d5ea39b34a78befe6c3f6fea4305da1f8f09389e0d1b08ac2bd2b12d408620fc8cd93128ffdf28fcf61315fc9fefba7ff22c8d61f2f08bcb420f8f6b052b27e355ba88bdc90883dfd3fb3761e96b269d396c847a992c61e3b202a927032b9cf0e08a20c1e09c1d06ed6d50a78cbf48b5d8a6039f5ed41ad0e9a5be1ce29183685a75cfbe84506197253a8abe0d1adca9a42479f2b04b53b9e88b0c915d05fa92046ea03d4ac514e2a28a601dd3fd99bb99ce6aed55bc630f48a500d555d1e3756e01948382501cec8fdb2f6f02d134f9f555043fd8f05301dde8f056d9241f79e5e95b7706d0cf7746c8d2ed30d0040c433e37ac52167dbd2ed02481f16e136ac8c01f36d07f52c060eceec82b02c428272037f1b010a7820419dd835ba3c723985230f2ca7c13b64ab2d1c8986e89c6d76f4e7ea90b168df8afd5b7badf8b5e5436ddf589f57063b572ee7dca8e85bd5e96cb21f24a1a7762f56e93b6cbf76215bb75f9f5dda45a21ea0eee3c0e16cc7cfe3a2c62f6bb3eec991e3e8e17bbc2fe5e1ca4526784ed84c664db11f59c0ab6f1c10fba543bde2f9a8b0d0e71c27296b449f9110041990aeb97663aad49eb7041315c3a0e7bdc5be9ef668049fcc71c76b8c3e1a065606cc79c5cb60d69ea093a0031c16be6b40a29e3b3d814b331524213386181bb8d8a2f8a0094d2919d4c58f58fa7beb9edea039b444ae97dfda5a1342044704255f74e0f8a2bf0aefc49f49d7289917046272cd407ff5cd7e876bb45242453c60cee04ba28e2a9c4ec51d4244c95b749d767df270795205357ed45ea81ded6172994ce2cc65188eef28b9721e84446dbace78a6c356253625ba89749159ab14987b7d2e0b29991ea876b4d598314fe8acf2dd3174e755c0aa3a5ad273a0c8af2b1510195bd2d4896adee8bc00e94dd32c6fd14326a0639d9f1c43eae8b173e330ed966fc7478340ffcdf1a2ee32672e4f39cb4139a92d69e2976900212f858146849ac917b25c8fed46e20161798fb704e052ae37eee3976c360d9f8848222020bee94e8f1cdb5be5756cc34c383b53aa31897c0e7058e65960ced964055bca15c784a206e42e4a417cc108e89dca77f8afbf824655b0f661cfdde781fc3a67e0022569cd6d83355cd3d7bfb1e147754a4f4de5a934c0122aad5ad4b2b1d642f8fa039cd58d7992d969624f23c975b9346fab8501e3564f2b7b2aacdf16796063b99d6539837277b8a7bdf88fa2542344ea194563c5661b583d99c4024ff27b5d482fe9cb0bdfe23e213f42cd0452218eb6026b9509cb9a7eae3cb8149040541e838eb91fcf88bf63787905fa1d532b6960448fab33f709724b7541424c1cbcc06deaaa24fa8a9a21a28b0bd6509b396018168ea1f93e18afc338ac4687e1ce9f5156a05f5748a432cb422e8b3d9be0032a679a2f7638f27540ca0c645c4c54e458faffdfa954f7ad5d83e49d14fd098fc4567b0a1b83eacc18e84d470294207eb519755da72c4fa7057fd10398aa95a8829050975eb8b65a80f51b35d9fd005dfd37fdeee66de9f6f02cb3df2e9d65219933b7e17415597d338ca4536acd9b18b950a427b0ee3603cab4f1c5783d8dd2e676ddd52f40e0ff146c003ad4eec4e22525bbd38e51a4d0758fde8d5dc48ff1cb4a90531d010561028fe750ba65d4cadb98ded0bd88bab328205b4c58fdfb12972a521f4505be69ecfd1a5fa531eba6d69e4fb94442af7037111d729234b9af9d9f5f917acb34d48c74febcaeffc65e802972618682a8f7988f3995946b1e3e70a48d50c2f4d7c086a62ad00f20cccd998a3ed1b2c728c066f3b83edb8a9b9eaf9a2498fd13378f066da5142296339e1a9d6e3d669b7131ae1a59b6c6c9a900d1635164314e8875a494f82925b8db5491d12f7d72aa9e3bb7444153712d9731e769467e47dcc75ac5c990b93ae8b32cb64b4aac0fce66c63e3c65422de2c64ac83b9709e8b75005e1a236fe0fe01d8ff840444b6864adc4d6d42df1725a3914301adef0a3a07c523b4a328053a0cd89f558201ddcbfea7ec351b3a0d663aa4476509ab226fca425edd50f71b5c961a4affc63d581bcbe6627d57cccb3c876c5b02bf2051f6f9aed19fb235d751d8201df875a5b616cf96603cf32031ed08e7c50fbce7c2d210147344093d9d5e87991bd39b44cd9725840498ca038332a8a3d12293562d8bc397435b836045b884af97959bf2f239734da0a1243f5bf6c0643a4994f676b8f4b347a5a60d1a895590a5771b2b8acd58153b7c32035b505bbf5bc2bf0a5a6752fef05b3b89d9fc601e03ce738efc33f7a24deba66a5b6347887832155563ffa8a7fae8b7367e64e517b643d894e36286e6575c2a5dfa89588902058e792f41ecf2eb9e209f7ee72a8265c3e09b56e9d97612dc8d256bdbd49a433362d1dfb67a52e7e618c53952a885ba06d006eeaefaa87af43ac482b8dd1832672abd2d2381041ab88baabfb7c0f7066c440106cf8787121f51f4d5c6fea776c76ce0be5eb1fec78e39b5a152fdc7bf4e7e429778f8cfcc7c10b10cc1f48f95297ec453d63ec456a2ed160cb51d279b5783c6085433ad8390527e898d8eb39ea586bb14f08cee2f575ba967d26fad5fa0476d3b3a3eff54cb6c3c9aed4c275ad74a607f9e2a32f6681d3558ffb0da36cdf3596d2cdf284282b54b17a618035f30ace809283ce994be9c28314f16ebbf1a13c2899f8424a218f4f22deb591ba8cceae02fa7debdb8883ea1a615fc65a3d925a703000000b1575b48f9f92ac419235e86d361fb85459e0f598a1f8694962a9fc6b4a60a9c30144bc448f3c246112f062f21111ddaa67bcc394986fc939f7c43772b6f029929bd4acfac6ca6ca310d3167b6aaf88dc21ef8f14a57c8db72746f5815da99bf650133811babfe1f378a91dc20e86f142b62965ab1d2fe4caa610fe142aba20a01de0f4819cbd66f1e95055465ba8a0afe5cb16f76ff3345c96e3ce7f80811bddb373f21b924b9327f6fb5bab24577dc5edc65870f36321abf7f5c4ef949a1ad659e0bee58eb55dd66fa6436b4f18c24e0c6324ce1b3980a3cd37d4c892d6798df5523d772c5458da3b4ce5a682fad9eadf8a99a6a4916e3e900e1265d62ab3a0d14479a64661f57ccf6d81503a2b98d5412765e176d8827f811c5ac7179cc56e98c26888b9f74e9943ed29aaf6cdc8801152b01082188a5a897165d8b4b6e1864ff05cf3fd7ff2bd58b6e2f164b0e80815440af928c08fdb30b84f957a8410a6a504463cc1ff10c0ed5464e0e902c81a57dc76dd3c331b82508907f8a1a91e908652719138eeb30b3d51f3d04c3b0bdc38c89ceffd9c3dcdb62960b24ed429d2a4f51863675a6a90c354efa45aa07d84c15ede073b6ec7981feb24d33aa1444586e8d714803c6c8433e44af24380ef84f52b517a47513f134e9c16d8be79e10b53345bbd9706736b0c38e923d161c96ef3bfe8ba9e272a52deb210a94a72e026919344488b67170bb336160c48794a1a32b4aa09914415625bf4f4541e3cafc10095d8e042f70e757a4f9cfd4ae62601585b557d7a28a3304a7015b3a33907fa1f60859ed623d3071937846056a0827a0a2a1ace43c3ca305fa33d55fcaa3bfd8dc9d39a8bd5121201291585a522d86a97aa9ce8353b48737ae9cfbf4192c5c95f1421061960a43e82c37b291a8f43765d49f709f0f218bacf64d4aac065cda7a0d5c353aa6a4f5ea0dca4cb61c7a05bc22409cddff50191e7b8e64d5df696dda7f96088b71d6230312dad236a3be3fa7efc93e4447507129531f865bc7420fd75e9bcfe37be43186393e1f2816f29c6c67a3bbba0db530a4ecaa869b4ed4f8ce2e5cb7b06314f214e3a6d44f0c838ddecea1447bbad030f017825aaa6635fa40ae1aa28ceff1a7518af60336ce08aac242563f429d3aadbbd5f183fd3c4642b5395d271c1d2f2ee7d201698be8d13d774b9072a30446273153b9d5a8b0a5163be73d05120494099add1036781957f7d14f3bb4a630e44932e6bf03d127a81613cf02356ef83d48c609494b67d1a22e72c1f24a31e93cb3dbfe89c2fd00c058376aa3df479f3bf6171b266495ba87dd2ebabceec142a458006f0621f5f727e55600860dbbcf0b5fef65ca9cf401610feaa1ed6accbd2afb2b949165ecc78dc6a5ce08dccd307803464890234a0b84059c602c9aa9a658c0931d4562136bb31cecbdedd93061b6c166f3e7f030a226210ebc0fd06e9cdc95f0c731d97e6351dcfb6c40ea484183146e34c7a793b95f854cf5c6bf179fe1269112f781ebd5debddd07fe2fafa9d3ea7049682f9a19d3357db4c406098fc25d1a09dc9611baea3b57ac9018291474015a92b47e5d3d5148418688d71a535ab9c9e9235119421568002fdd40e317183bee2cb694b13487bd9cc826d9d7f82c41f0c765837ff85043247b1be0ac6f1aad4653448e2d062760fbd816881b844340f14af1852e387a5fbacbf465ab1363c46b92c76173237dd05fffcf09606f56430e8b60bfb6215ef6002cb14e00d60012286346220ee1fff29b453fa8ebeebc25fa94933d29a6e5ff12f89667414d9c43cd5d6afb7f8e706f3f2c59cbd9817ad53df457bccf9a0f00a0a5c49b4244bfdfa8cb9a677d3da3f9ccc4ab853298b2ac688dbb226ed6c936e3e8c4aa3afcd16760d0381f97de714b2580c3b83d64d978d71ad0037d6e12a264da6c756a1e81d740c0dd2ba39447c909f9f00bd3fa446518dded5ee4933791f75c2814c70cfbab43bfed592022ecd8aa566e1fdd1dc4d311e0b0b3d1f7773df6faf043f707271314f131f06c5036c78fb4edbee4f2964b01ff29ec3ed21c634839de288caf8edd1e0181699e86304baff5809a968f5d96ab2a9599881b3a909f61353d029eb71c4c57d7c890584fd1b8f377e3373c89db10b2254322ce3a365c3f24864726e5d34020f828f7b18414b9cfe758a9e5a69db2d37f5ff2a673c770c63a159aa9e2969e5bef24314900a506e5e1693a08914cbe30a9faa28d0f91586c40eb733930872e0a0349c8d5a078b6aa9cf9f5f9b1052ef3db659610826e5093bc6585a6324c8b4afb5e09125af41af326406cbe0a01a6a48f205e74abda1146b4729e719a5c8ff57142364ae3394c560eb39ae084801743188486be1b3fb4a8328cbd3a41d92ffee0cae0a8861ec8b108351d790f4acda42df5f2bb00f9d2b964411df08842aa568b8d731fcd16d259f4f1deb57d8729901b5ee9d010f87ce76857c641539babb3ee307a8c"}, @NL80211_FTM_RESP_ATTR_LCI={0x4f, 0x2, "c361bf47ce10d9d659c63b0d362ee0a7e4b1db56c0e19c734cd3d3245251eacf2f5440534a4a2f360f73c73f0b8b67d61d32a6266171103edfad34936b0daa112f7a35f2827076d3c73fcf"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xad, 0x3, "2754db1068597e684eba5c3e682efd9f8e077d8b6772cf978e8836dbac14f2ee5e2c77c3bbedd689c3efa1b2dbfcba3a8a62dd337695c96434c47bda9bb6a430c6230fed1ed1255c3d38d9179932ee3d06e1d015d2ff0377415603f356e079fc6c4b68563c8510935cf65ad9b7a04a054ba361c382a22adf50ee7d8db9df4692cf5e306a185490a402fb1c2bd6f1209586642aa11017be0dcecc13621a602112ba11e5d7057792ac17"}]}, @NL80211_ATTR_BEACON_HEAD={0xad, 0xe, "14827682dc2c7314903e454dd0d0490932145e42f49915a247a7f6a82c283a91b816e89debcf58417f2566ad776fed9b54ef9a6885d89e9b44ac91bdbf346048ca23c8a3553cc514bd0ebc011634fc7dd1393c0e7447cc6358a0bdeedf9d9f37134df1348f1a74fe7f0da36459deb38ec5b24d4510b786b02d8c3128abbe458421a9628a895d424e94584fc32a00c478781858fe046cc510390b44b147bed5b4685a5ebc99966ebf08"}]}, 0x1bec}, 0x1, 0x0, 0x0, 0x1}, 0x4000041) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r7, 0x800, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x8c4) sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 20:35:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9ca"], 0x50}}, 0x0) 20:35:03 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:35:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) [ 694.915127][T27206] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 694.945671][T27207] validate_nla: 2 callbacks suppressed [ 694.945680][T27207] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 20:35:04 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdf", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:35:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x50}}, 0x0) [ 695.080859][T27223] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 20:35:04 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r3, r2, 0x0, 0x8000000000004) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) 20:35:04 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdf", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:35:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x50}}, 0x0) 20:35:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9ca"], 0x50}}, 0x0) [ 695.220892][T27229] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 20:35:04 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdf", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:35:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x50}}, 0x0) 20:35:04 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 695.325894][T27235] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 695.364687][T27240] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 695.470508][T27245] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 20:35:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0], 0x50}}, 0x0) [ 695.606828][T27249] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. 20:35:04 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:35:04 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:35:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:04 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000000004) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) sendfile(r4, r3, 0x0, 0x8000000000004) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) sendfile(r7, r8, 0x0, 0xf03b0000) sendfile(r7, r6, 0x0, 0x8000000000004) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x80, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r0}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r0}, {0x8, 0x1, r4}, {0x8, 0x1, r1}, {0x8, 0x1, r6}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}]}, 0x80}, 0x1, 0x0, 0x0, 0x24004054}, 0x104) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) [ 695.780074][T27253] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 695.803710][T27256] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 695.836636][T27256] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 20:35:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) clock_gettime(0x0, &(0x7f0000002200)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000080)=""/117, 0x75}, {&(0x7f00000001c0)=""/111, 0x6f}, {&(0x7f0000000240)=""/134, 0x86}, {&(0x7f0000000300)=""/216, 0xd8}, {&(0x7f0000000400)=""/241, 0xf1}, {&(0x7f0000000540)=""/204, 0xcc}], 0x6, &(0x7f0000000000)=""/39, 0x27}, 0x7fffffff}, {{&(0x7f0000000740)=@isdn, 0x80, &(0x7f0000000640)=[{&(0x7f00000007c0)=""/104, 0x68}, {&(0x7f0000000840)=""/166, 0xa6}, {&(0x7f0000000100)=""/22, 0x16}, {&(0x7f0000000900)=""/128, 0x80}], 0x4, &(0x7f0000000980)=""/4, 0x4}, 0x8}, {{&(0x7f00000009c0)=@ax25={{0x3, @null}, [@null, @netrom, @netrom, @rose, @remote, @default, @null, @netrom]}, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000a80)=""/203, 0xcb}, 0x2}, {{&(0x7f0000000b80)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000001080)=[{&(0x7f0000000c00)=""/253, 0xfd}, {&(0x7f0000000d00)=""/8, 0x8}, {&(0x7f0000000d40)=""/150, 0x96}, {&(0x7f0000000e00)=""/192, 0xc0}, {&(0x7f0000000ec0)=""/75, 0x4b}, {&(0x7f0000000f40)=""/148, 0x94}, {&(0x7f0000001000)=""/107, 0x6b}], 0x7}, 0x2}, {{&(0x7f0000001100)=@ethernet={0x0, @random}, 0x80, &(0x7f0000001700)=[{&(0x7f0000001180)=""/206, 0xce}, {&(0x7f0000001280)=""/22, 0x16}, {&(0x7f00000012c0)=""/237, 0xed}, {&(0x7f00000013c0)=""/186, 0xba}, {&(0x7f0000001480)=""/139, 0x8b}, {&(0x7f0000001540)=""/146, 0x92}, {&(0x7f0000001600)=""/206, 0xce}], 0x7, &(0x7f0000001780)=""/222, 0xde}, 0x101}, {{&(0x7f0000001880)=@isdn, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001900)=""/208, 0xd0}, {&(0x7f0000001a00)=""/81, 0x51}, {&(0x7f0000001a80)=""/158, 0x9e}, {&(0x7f0000001b40)=""/91, 0x5b}, {&(0x7f0000001bc0)=""/43, 0x2b}, {&(0x7f0000001c00)=""/165, 0xa5}], 0x6, &(0x7f0000001d40)=""/157, 0x9d}, 0x5}, {{&(0x7f0000001e00)=@ethernet={0x0, @local}, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001e80)}, {&(0x7f0000001ec0)=""/107, 0x6b}, {&(0x7f0000001f40)=""/43, 0x2b}], 0x3, &(0x7f0000001fc0)=""/68, 0x44}, 0x5}], 0x7, 0x40000100, &(0x7f0000002240)={r1, r2+10000000}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 20:35:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0], 0x50}}, 0x0) 20:35:05 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:35:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) [ 696.120050][T27265] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 696.131646][T27265] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 696.144662][T27264] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 20:35:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) [ 696.166014][T27266] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. 20:35:05 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a3", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:35:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0], 0x50}}, 0x0) [ 696.240316][T27270] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 696.249570][T27270] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 20:35:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) [ 696.319381][T27274] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 696.340210][T27275] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 20:35:05 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b00000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:35:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB], 0x50}}, 0x0) 20:35:05 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a3", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 696.700796][T27281] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. 20:35:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB], 0x50}}, 0x0) 20:35:06 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) accept4$inet(r4, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r6, r5, 0x0, 0x8000000000004) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r8, r7, 0x0, 0x8000000000004) getpeername$inet(r8, &(0x7f0000000080)={0x2, 0x0, @private}, &(0x7f0000000100)=0x10) r9 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r9, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0) 20:35:06 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a3", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:35:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:06 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="3400000010000104000020000000000000000000", @ANYRES32=r4, @ANYBLOB="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"], 0x34}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r5, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r5, 0x660c) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r7}) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@local, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4e21, 0x4, 0x4e20, 0xfffd, 0x2, 0x0, 0x80, 0x2f, r4, r7}, {0xda1d, 0xfffffffffffffffb, 0x7, 0x4ab9, 0x80, 0x8, 0x1, 0xfffffffffffffffd}, {0x0, 0x1ff, 0x2, 0x40}, 0x80000001, 0x6e6bb6, 0x2}, {{@in6=@mcast2, 0x4d5, 0x6c}, 0xa, @in6=@rand_addr=' \x01\x00', 0x3504, 0x1, 0x3, 0x6d, 0x100, 0x0, 0xe4}}, 0xe8) setsockopt$inet_udp_encap(r6, 0x11, 0x64, &(0x7f00000001c0)=0x4, 0x4) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 20:35:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB], 0x50}}, 0x0) 20:35:06 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) r2 = socket$pppoe(0x18, 0x1, 0x0) splice(r2, 0x0, r0, 0x0, 0x7fffffff, 0x4) 20:35:06 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b00000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:35:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4a128c1aa7cf68a72e18b043723262ef1db17855e9b9c3c4f3d85375cfa53566d1bccb85f7297cb07953a21aa4f222f0b3883bb31e8a8f15e68f55716d40aae"], 0x50}}, 0x0) 20:35:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:06 executing program 3: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000000004) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) sendfile(r4, r3, 0x0, 0x8000000000004) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) sendfile(r7, r8, 0x0, 0xf03b0000) sendfile(r7, r6, 0x0, 0x8000000000004) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x80, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r0}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r0}, {0x8, 0x1, r4}, {0x8, 0x1, r1}, {0x8, 0x1, r6}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}]}, 0x80}, 0x1, 0x0, 0x0, 0x24004054}, 0x104) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) 20:35:06 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) sendfile(r4, r3, 0x0, 0x8000000000004) r6 = openat$cgroup_ro(r1, &(0x7f00000001c0)='cpu.stat\x00', 0x0, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000080)="d3abc7990d535c9e0000005fd3252781b7b7e944cf41c265935f44dbb0048283787eafb5d7450bb0715a3ad4716b9d39dd44eff236c5db15dcb2224e14d8e0b5fb3db0f24d1f195c233caedef563e45fae56dcc5d29f15a3f07c2c718618168b362248e630a6ac5b0283872d3c3b", 0xfea2) r8 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 20:35:06 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f0000000040)=0x81, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) [ 697.578704][T27320] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 20:35:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) [ 697.642347][T27320] device macsec1 entered promiscuous mode [ 697.675585][T27320] device vlan0 entered promiscuous mode [ 697.712419][T27320] device vlan0 left promiscuous mode 20:35:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x3c, r2, 0x536ae464467e3e0b, 0x0, 0x0, {0x9}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)={0x13c, r2, 0x0, 0x70bd25, 0x25dfdbff, {}, [@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20880) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000014000000500004001c0000"], 0x24}}, 0x0) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r4, 0x4, 0x70bd2c, 0x4, {}, [@TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x34}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10001}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x100}, 0x800) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet(0x2, 0x702bbb5739373f75, 0x0) bind$inet(r6, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r6, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r6, 0x0, r5, 0x0, 0x7fffffff, 0x0) 20:35:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:07 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) socket$inet_udp(0x2, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) 20:35:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:07 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b00000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:35:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB], 0x50}}, 0x0) 20:35:07 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r3, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) splice(r0, &(0x7f0000000240)=0x9, r3, &(0x7f0000000280)=0x9a, 0x6, 0x9) sendto$inet(r2, 0x0, 0x0, 0x40046bd, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r5, r4, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, &(0x7f0000000000)=0x8, 0x4) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r6, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) r7 = socket$netlink(0x10, 0x3, 0x0) accept4$unix(r4, 0x0, &(0x7f0000000200), 0x80000) ioctl(r7, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_BSS(r7, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="20002cbd2600fcdbdf251900000008000100ffffffff"], 0x1c}, 0x1, 0x0, 0x0, 0x40891}, 0x4850) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r8, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x80000000, 0x2}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x20000040) 20:35:07 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x7a05, 0x1700) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0xf000) sendfile(r6, r7, 0x0, 0xf03b0000) sendfile(r6, r1, 0x0, 0x8000000000004) bind$alg(r6, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r8 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 20:35:07 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) pipe(&(0x7f0000001b40)={0xffffffffffffffff}) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000001b80), 0x4) r2 = accept4(r0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000000)) r3 = epoll_create1(0x80000) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000040)={0x10000009}) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 20:35:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdf", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB], 0x50}}, 0x0) 20:35:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdf", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:07 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0xb3) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000080)={r2}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r3, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) pwrite64(r3, &(0x7f0000000000)="fb77df7614a078249cd3b0bedbc53f1a7b2d122515d21cf8461558de7d26aa58cfd27ce01050aab536d66e5c88fd4460caa3763236aac21836b1a43da6f0c73b5d3d7dcfca8ced78", 0x48, 0x8001) 20:35:07 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = accept4$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x2, 0x0, @dev}, &(0x7f0000000600)=0x10, 0x800) bind$inet(r2, &(0x7f00000003c0)={0x2, 0x4e23, @private=0xa010102}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) 20:35:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB], 0x50}}, 0x0) 20:35:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdf", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:08 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r1, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) bind$rose(r1, 0x0, 0x0) recvfrom$rose(r1, &(0x7f00000002c0)=""/252, 0xfc, 0x100, &(0x7f00000003c0)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r2, &(0x7f0000000240)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000280)=0x10, 0x800) socket$inet6_udp(0xa, 0x2, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f0000000100), &(0x7f00000001c0)=0x40) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r5, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) bind$rose(r5, 0x0, 0x0) accept4$rose(r5, &(0x7f0000000040)=@short={0xb, @dev, @bcast}, &(0x7f00000000c0)=0xb, 0x80000) 20:35:08 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x3ff) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r2, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) 20:35:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:08 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], 0x0, 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:35:08 executing program 3: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = accept4$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x2, 0x0, @dev}, &(0x7f0000000600)=0x10, 0x800) bind$inet(r2, &(0x7f00000003c0)={0x2, 0x4e23, @private=0xa010102}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) 20:35:08 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) sendfile(r4, r3, 0x0, 0x8000000000004) r6 = openat$cgroup_ro(r1, &(0x7f00000001c0)='cpu.stat\x00', 0x0, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000080)="d3abc7990d535c9e0000005fd3252781b7b7e944cf41c265935f44dbb0048283787eafb5d7450bb0715a3ad4716b9d39dd44eff236c5db15dcb2224e14d8e0b5fb3db0f24d1f195c233caedef563e45fae56dcc5d29f15a3f07c2c718618168b362248e630a6ac5b0283872d3c3b", 0xfea2) r8 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 20:35:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) [ 699.487040][T27389] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 699.553673][T27389] device macsec1 entered promiscuous mode [ 699.574894][T27389] device vlan0 entered promiscuous mode [ 699.584656][T27389] device vlan0 left promiscuous mode 20:35:08 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0xffff, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0x8000000000004) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000080)=0x5, 0x4) 20:35:08 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) sendto$inet(r0, &(0x7f0000000000)="e80c9d49b77fad3e0d13b0c924b8ebbd52985ee108e25e75d8dea733f2e3fa088f9e6fcdf3b8d7bc24add9b3f67039e7d77f52802c25261aafc32f77f606", 0x3e, 0x4000804, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) 20:35:08 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 20:35:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:09 executing program 0: close(0xffffffffffffffff) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000000)={r1}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000016c0)={r1, @in6={{0xa, 0x4e23, 0x5, @ipv4={[], [], @empty}, 0x5479}}}, &(0x7f0000000100)=0x84) r3 = socket(0xa, 0x1, 0x0) close(r3) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000000)={r5}, 0x8) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000040)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000005c0)=[{&(0x7f00000001c0)="ce05aacfc6e0fa932cf2fb7d7781ee655987c2c963268c4f88918c34b973d984670aea020ced9c6cd53ce03dea2131cffe0df0c2417cfe37442d75043d4815d23b80f89d23ce02a7ad2d8b8d12138709d0d4fda1403cbfbf6e7a2ae0db3c051f5ea7eaa77df15404300f2fa1f5626af1665fce04c89f9f7127a0b0e27ec5dde6c240d3e96755c68de33d2ad5847170d9e2d2443579dd1885a2babc877d495001bbddfd12a21b01b540e3a101a3c6f3a0d5da98874be49f86a416b5e7f81dda71b5af41384e171ee4f9ad3541", 0xcc}, {&(0x7f0000000080)="92fed3", 0x3}, {&(0x7f00000000c0)="9bf30c7060a2ec2cc04b236cafbbe15e785e94b4737e61ebbbc92fa37ecf912270d590", 0x23}, {&(0x7f00000002c0)="a8cb3f6bee92a01848cc9a4097badcf655a1e382d1c40abf409abf524926352300534fc6d8cd531816535666ca174fba9adc390001fc5cb7e8beaf2508c81035fa047d04a5da6f38c9b77bb3c562211c8b5764c22ffe56308869a72051c61a5ba7aebf29dfa191c8c0ac40dbaf04de3550c5cf7f0ca8683b7a4d309b8235406e791e0300a25d78f3fcd8f523030dd00500e2af40eab124d11f071a19be0d611275690421cc158200bf0b8aead3e2cd799a29657cbe70d62528665bb021042b", 0xbf}, {&(0x7f00000003c0)="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", 0xfc}, {&(0x7f0000000540)="d62e85da655a7ea21abb5fe03034cd315666e5cc666ac09cfa4e53a73b6916ff0925af278ada6b693eef83a1705871b815735fb50a2200694c9b2690c2546d157996a9d730d67b0e7fdb9e5bb5e88a6cef80286756", 0x55}, {&(0x7f00000006c0)="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", 0x1000}], 0x7, &(0x7f0000001780)=[@authinfo={0x18, 0x84, 0x6, {0xeb}}, @init={0x18, 0x84, 0x0, {0x1, 0x1, 0x3, 0x6}}, @authinfo={0x18, 0x84, 0x6, {0x9}}, @authinfo={0x18}, @sndrcv={0x30, 0x84, 0x1, {0x9, 0x5, 0x4, 0x9, 0xfffffffa, 0x7, 0x53, 0x1, r2}}, @sndrcv={0x30, 0x84, 0x1, {0x5, 0x101, 0x0, 0x81f2, 0x8, 0xffffffe0, 0x10001, 0x2}}, @sndrcv={0x30, 0x84, 0x1, {0x65, 0x7f, 0x201, 0x9, 0xd6b6, 0x1ff, 0x2c63, 0x1, r5}}], 0xf0}, 0x80) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r7 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r7, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) r8 = socket$kcm(0x29, 0x7, 0x0) r9 = accept4(r8, 0x0, 0x0, 0x80800) sendmsg$L2TP_CMD_SESSION_CREATE(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40082) setsockopt$bt_hci_HCI_TIME_STAMP(r9, 0x0, 0x3, &(0x7f0000000000)=0x1, 0x4) 20:35:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a3", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB], 0x50}}, 0x0) 20:35:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a3", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:09 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], 0x0, 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:35:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB], 0x50}}, 0x0) 20:35:09 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) sendfile(r4, r3, 0x0, 0x8000000000004) r6 = openat$cgroup_ro(r1, &(0x7f00000001c0)='cpu.stat\x00', 0x0, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000080)="d3abc7990d535c9e0000005fd3252781b7b7e944cf41c265935f44dbb0048283787eafb5d7450bb0715a3ad4716b9d39dd44eff236c5db15dcb2224e14d8e0b5fb3db0f24d1f195c233caedef563e45fae56dcc5d29f15a3f07c2c718618168b362248e630a6ac5b0283872d3c3b", 0xfea2) r8 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 20:35:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a3", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB], 0x50}}, 0x0) [ 700.647043][T27435] __nla_validate_parse: 22 callbacks suppressed [ 700.647054][T27435] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 700.691692][T27436] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. 20:35:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00"], 0x50}}, 0x0) 20:35:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b58"], 0x50}}, 0x0) 20:35:10 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r1, r0, 0x0, 0x8000000000004) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'team_slave_1\x00'}, 0x18) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r3, 0x0, r2, 0x0, 0x7fffffff, 0x0) [ 700.980090][T27443] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 701.160374][T27447] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 20:35:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00"], 0x50}}, 0x0) 20:35:10 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0xff1c, @dev={0xac, 0x14, 0x14, 0x16}}, 0xf) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) 20:35:10 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], 0x0, 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) [ 701.326873][T27454] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 20:35:10 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r3, r2, 0x0, 0x8000000000004) sendto$inet(r3, &(0x7f0000000000)="d5a01450c2b95bd109f10b539374a0857816116ac39515e9bf732fc885fd0c9edaa299a648f3c812ed0b46e5a2b8e10d83d969fc854a2c", 0x37, 0x0, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) 20:35:10 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r1}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) sendmsg$netlink(r3, &(0x7f0000004440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004400)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r4}}}], 0x20}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0}, &(0x7f00000003c0)=0xc) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r7}) r8 = getgid() r9 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r9, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240), 0x0, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [r9, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1, r4}}}, @cred={{0x1c, 0x1, 0x2, {r5, r7, r8}}}, @rights={{0x14, 0x1, 0x1, [r9]}}], 0xa0, 0x4}, 0x4004805) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r11 = accept4(r10, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r11, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 20:35:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00"], 0x50}}, 0x0) 20:35:10 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9ca", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:35:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00"], 0x50}}, 0x0) [ 701.712118][T27466] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 20:35:10 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) sendfile(r2, r1, 0x0, 0x8000000000004) sendto$phonet(r2, &(0x7f0000000000), 0x0, 0x40, &(0x7f0000000040)={0x23, 0x81, 0xff, 0x9}, 0x10) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) accept4(r5, &(0x7f0000000080)=@nfc_llcp, &(0x7f0000000000)=0x80, 0xc00) 20:35:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe0848"], 0x50}}, 0x0) [ 701.891493][T27469] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 702.070378][T27475] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 20:35:11 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x5, 0xfffffffc) epoll_pwait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000300)={[0x7e]}, 0x8) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r3, r2, 0x0, 0x8000000000004) r5 = openat$cgroup_ro(r2, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x24, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}]}, 0x24}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0xc0, r7, 0x12, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x95}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xd658}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3fe}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4081}, 0x4) [ 702.139581][T27480] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 702.160639][T27480] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:35:11 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x0, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) [ 702.212949][T27480] device macsec1 entered promiscuous mode [ 702.232753][T27480] device vlan0 entered promiscuous mode 20:35:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe0848"], 0x50}}, 0x0) 20:35:11 executing program 3: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) socket$rxrpc(0x21, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) [ 702.447668][T27495] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 702.476496][T27495] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:35:11 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) 20:35:11 executing program 3: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) socket$rxrpc(0x21, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) 20:35:11 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) accept$alg(r0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 20:35:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe0848"], 0x50}}, 0x0) 20:35:12 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) sendfile(r2, r1, 0x0, 0x8000000000004) connect$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, @fixed={[], 0x12}, 0x7}, 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r5, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) sendfile(r5, r4, 0x0, 0x8000000000004) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="fb5d67efa4fcfb70e05c20405465f34cbc22a7ed487237a15c9f853391ab339e3528f2a584a553adc6962cb58c2928ea905b023011a0a4391e272c3f4a0a3c52576d51a6aa73a7db348a387f69b6eaf1a6fca8906f18c8999e8afd85e058c685a3c262a6aa24a17a3fe8150cdcf89b654804d983f270b09543de2b7d282859a31b670f7ba1032a2e2fdecb07ebe0504839fe8d", 0x93) r6 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 20:35:12 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendto$inet(r2, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) 20:35:12 executing program 3: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) socket$rxrpc(0x21, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) [ 702.913477][T27513] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 702.931955][T27513] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:35:12 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) sendfile(r2, r1, 0x0, 0x8000000000004) sendto$phonet(r2, &(0x7f0000000000), 0x0, 0x40, &(0x7f0000000040)={0x23, 0x81, 0xff, 0x9}, 0x10) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) accept4(r5, &(0x7f0000000080)=@nfc_llcp, &(0x7f0000000000)=0x80, 0xc00) 20:35:12 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) sendfile(r2, r1, 0x0, 0x8000000000004) sendto$phonet(r2, &(0x7f0000000000), 0x0, 0x40, &(0x7f0000000040)={0x23, 0x81, 0xff, 0x9}, 0x10) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) accept4(r5, &(0x7f0000000080)=@nfc_llcp, &(0x7f0000000000)=0x80, 0xc00) 20:35:12 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x0, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:35:12 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r3, r2, 0x0, 0x8000000000004) accept$nfc_llcp(r2, &(0x7f0000000000), &(0x7f0000000080)=0x60) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000000004) r5 = socket(0xa, 0x1, 0x0) close(r5) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000000)={r7}, 0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32=r7, @ANYBLOB="4c3706002800090035b17f0007000200"], &(0x7f0000000180)=0x14) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) 20:35:12 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x8000000000004) bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0xff04) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bd111c8eff7f007f000000004e0000", 0xfffffffffffffc92) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r3, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r3], 0x74}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 20:35:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b58"], 0x50}}, 0x0) [ 703.417396][T27540] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 20:35:12 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r2, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0xf000) sendfile(r5, r6, 0x0, 0xf03b0000) sendfile(r5, r4, 0x0, 0x8000000000004) accept4$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14, 0x80000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="540053002800847800cf5835ef9b79418d08ea0b281f80000000", @ANYRES32=r7, @ANYBLOB="0900ffff0e000d000a0007000600050000080000060005004040000006000500052000000600050000000000060005007f0700000600050007190000"], 0x54}, 0x1, 0x0, 0x0, 0x4004800}, 0x4000045) r8 = accept4(r3, 0x0, 0x0, 0x80800) sendmsg$L2TP_CMD_SESSION_CREATE(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 20:35:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b58"], 0x50}}, 0x0) [ 704.166045][T27555] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 20:35:13 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x0, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:35:13 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007f8, &(0x7f0000000040)={0x2, 0x4ea3, @empty}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) 20:35:13 executing program 3: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r3, r2, 0x0, 0x8000000000004) accept$nfc_llcp(r2, &(0x7f0000000000), &(0x7f0000000080)=0x60) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000000004) r5 = socket(0xa, 0x1, 0x0) close(r5) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000000)={r7}, 0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32=r7, @ANYBLOB="4c3706002800090035b17f0007000200"], &(0x7f0000000180)=0x14) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) 20:35:13 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$nl_crypto(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=@del={0x108, 0x11, 0x2, 0x70bd29, 0x25dfdbfb, {{'sha256-ni\x00'}, [], [], 0x2400, 0x400}, [{0x8, 0x1, 0x4}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0xfa}, {0x8, 0x1, 0x3}, {0x8, 0x1, 0xfffffffb}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000800}, 0x8011) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 20:35:13 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x8000000000004) bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0xff04) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bd111c8eff7f007f000000004e0000", 0xfffffffffffffc92) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r3, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r3], 0x74}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 20:35:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b58"], 0x50}}, 0x0) 20:35:13 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0xf000) sendfile(r5, r6, 0x0, 0xf03b0000) sendfile(r5, r4, 0x0, 0x8000000000004) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xc000, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r8, 0x29, 0x1b, &(0x7f0000000000)=""/190, &(0x7f0000000100)=0xbe) [ 704.732618][T27579] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 20:35:13 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x14, 0x4, 0x4, 0x3}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x28, &(0x7f0000000100)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={r4, 0x0, 0x8}, 0xc) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r4, 0x200, 0x8}, 0xc) sendfile(r5, r1, 0x0, 0x8000000000004) close(r5) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x321, 0xf8, 0xfd, 0xf9, 0x1, @dev={[], 0x27}}, 0x10) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={r6, 0x14, 0x1, 0x7, &(0x7f0000000100)}, 0x20) r7 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) 20:35:13 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) write$cgroup_int(r5, &(0x7f0000000080)=0xfffffffffffffff7, 0x12) ioctl$SIOCPNGETOBJECT(r3, 0x89e0, &(0x7f0000000000)=0x9) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 20:35:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0"], 0x50}}, 0x0) [ 705.156632][T27593] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 20:35:14 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:35:14 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:35:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0"], 0x50}}, 0x0) 20:35:14 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) ioctl$IMGETDEVINFO(r3, 0x80044944, &(0x7f0000000000)={0x6}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r5 = accept4(r0, 0x0, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendfile(0xffffffffffffffff, r6, 0x0, 0xf03b0000) getsockopt$inet_mtu(r6, 0x0, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) [ 705.598751][T27605] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 20:35:14 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$rxrpc(r0, &(0x7f0000000100)="cf7c2eda4e42daf607c47c420e761e1b6a95a391a2650a51f15e5f28e98fcf87b6093615b42dfeaebeeae5fa21b0921dab5e82ef47822385953573f3d2caecf1edb154197e9a89db7a766aa0d50319393757b9dd0153df84859e0e5f49676750d7592f4300d0a6d44a5479d72bfb310bbec9d23bc055c732ff6ec63ddd8053556956691faa7cab1092d79901d5320370d85c8859b0ef5c9ba94ba76946c32b6b98f67e507d073ade27ce3a4238c5821769b20de2a1f4e7b0a7eba97edb17a0bd87ce136bac10a75dc820f31887cc0883995858340010f96d1630a848545e9d5826c99512896f20b1c6652863cb41339e13dc49c5", 0xf4, 0x90, &(0x7f0000000080)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e23, 0x80, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x24) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000000)={'NETMAP\x00'}, &(0x7f0000000040)=0x1e) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) 20:35:14 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8000000000004) ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, &(0x7f0000000340)={0x39, 0x9}) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) r3 = accept(0xffffffffffffffff, &(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, &(0x7f0000000080)=0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f00000002c0)='./file0\x00', r4}, 0x10) sendmsg$nl_netfilter(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0xb0, 0x7, 0xb, 0x101, 0x70bd65, 0x25dfdbfd, {0x3, 0x0, 0x8009}, [@generic="475f34535a662010be5b1799a7f221a75179fcdcd3823c1bb7b96be34b6ba258e8df45763b7a05fb5fceac9bad37d7d50b24af35636a200ef01d2e7208bc07a8d63937672b1b5bc0ee3c60251e5126bb64f80d46a3958828a2f511d452bfd9f661f61665fac21b73fc3a6e9a52e154059fa28bbe8f28a7f31a470ae153f61b39bcdd26d727686f563b3badccac51280b0b4abd1b0cc31a9df78e44b7"]}, 0xb0}, 0x1, 0x0, 0x0, 0x10}, 0x4008000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r6 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 20:35:15 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) ioctl$sock_inet_tcp_SIOCATMARK(r5, 0x8905, &(0x7f0000000280)) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={0x2c, r6, 0x401, 0x0, 0x0, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}}, 0x2c}}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r6, 0x800, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40408c1) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f0000000080), &(0x7f0000000100)=0x8) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) sendto$llc(r0, &(0x7f0000000000)="1bac64b99ae6290913938209cc75a132ba98c62e16a6f8635643f26629ef4753456b22dc89700bba4d4a1a5e2f9f6cd6bdda4c275c8a63ad775111c4925b01c5026c7fe44f7cac33", 0x48, 0x0, 0x0, 0x0) 20:35:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0"], 0x50}}, 0x0) 20:35:15 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x14, 0x4, 0x4, 0x3}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x28, &(0x7f0000000100)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={r4, 0x0, 0x8}, 0xc) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r4, 0x200, 0x8}, 0xc) sendfile(r5, r1, 0x0, 0x8000000000004) close(r5) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x321, 0xf8, 0xfd, 0xf9, 0x1, @dev={[], 0x27}}, 0x10) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={r6, 0x14, 0x1, 0x7, &(0x7f0000000100)}, 0x20) r7 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) 20:35:15 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x8000000000004) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) sendto$inet(r5, 0x0, 0xfffffffffffffd88, 0x2400c7dd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) 20:35:15 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:35:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9ca"], 0x50}}, 0x0) 20:35:15 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) [ 706.376614][T27647] validate_nla: 1 callbacks suppressed [ 706.376624][T27647] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 20:35:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9ca"], 0x50}}, 0x0) 20:35:15 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f00000001c0)=""/8, &(0x7f0000000240)=0x8) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r3, r2, 0x0, 0x8000000000004) r5 = socket(0xa, 0x1, 0x0) close(r5) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000000)={r7}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000040)={r7, @in6={{0xa, 0x4e24, 0x10001, @empty, 0x20}}, 0x53d0, 0x6, 0x7ff, 0x0, 0x50, 0x7ff, 0xfa}, &(0x7f0000000100)=0x9c) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r8 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) [ 706.783809][T27658] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 20:35:16 executing program 3: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0xf000) sendfile(r5, r6, 0x0, 0xf03b0000) sendfile(r5, r4, 0x0, 0x8000000000004) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xc000, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r8, 0x29, 0x1b, &(0x7f0000000000)=""/190, &(0x7f0000000100)=0xbe) 20:35:16 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) 20:35:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9ca"], 0x50}}, 0x0) 20:35:16 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) [ 707.135250][T27672] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 20:35:16 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:35:16 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") write$binfmt_elf32(r2, &(0x7f000000a0c0)={{0x7f, 0x45, 0x4c, 0x46, 0xff, 0x3f, 0xa1, 0x5e, 0x7d603745, 0x2, 0x6, 0x9, 0x58, 0x38, 0xc4, 0x80, 0xb0, 0x20, 0x1, 0x5, 0x8001, 0x7fff}, [{0x7, 0x7, 0x1, 0xfff, 0x5, 0xff, 0x0, 0xfffffffa}], "38364b390736c559d751063460f945a7afb0b13a41f53181e92499331a15f7e991bd2756db718d68acb5fd711427a5f8ec69f55063bf3cbf1d972e0023366ed9480f5ba2f0bcc6a6156f4ccc56b13fd72f02203e479c968026af8f9973026b1328e26915b0888dfda755d1e55b0982ec8fe54e4f6da14820339b6d96991a49eed88d10112a62d2f5a078784dd597ccf191d8e66fbd69654e88030aefec", [[], []]}, 0x2f5) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r3, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280)='batadv\x00') r6 = socket$inet(0x2, 0x3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f00000001c0)={0x0, @local, @local}, &(0x7f00000000c0)) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)={0x1c, r5, 0x711, 0x0, 0x0, {0xb}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) recvmmsg(r3, &(0x7f000000a600)=[{{&(0x7f0000000200)=@llc, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)}, {&(0x7f00000002c0)=""/139, 0x8b}, {&(0x7f0000000500)=""/205, 0xcd}, {&(0x7f0000000400)=""/91, 0x5b}], 0x4, &(0x7f0000000640)=""/178, 0xb2}, 0x6}, {{&(0x7f0000000700)=@rc, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000780)=""/29, 0x1d}], 0x1, &(0x7f0000001340)=""/4092, 0xffc}, 0xcaf0}, {{&(0x7f0000000800)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000880)=""/201, 0xc9}, {&(0x7f0000000980)=""/249, 0xf9}], 0x2, &(0x7f0000000ac0)=""/122, 0x7a}, 0x1}, {{&(0x7f0000000b40)=@tipc=@id, 0x80, &(0x7f0000000040)=[{&(0x7f0000000bc0)=""/25, 0x19}], 0x1}, 0x5}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000c40)=""/241, 0xf1}, {&(0x7f0000000d40)=""/11, 0xb}, {&(0x7f0000002340)=""/4096, 0x1000}, {&(0x7f0000000d80)=""/198, 0xc6}, {&(0x7f0000003340)=""/4096, 0x1000}, {&(0x7f0000000e80)=""/220, 0xdc}], 0x6, &(0x7f0000001000)=""/78, 0x4e}, 0xffff0001}, {{0x0, 0x0, &(0x7f0000005440)=[{&(0x7f0000001080)=""/168, 0xa8}, {&(0x7f0000001140)=""/168, 0xa8}, {&(0x7f0000001200)=""/71, 0x47}, {&(0x7f0000004340)=""/4096, 0x1000}, {&(0x7f000000a500)=""/212, 0xd4}], 0x5, &(0x7f0000001280)=""/33, 0x21}, 0x6}, {{0x0, 0x0, &(0x7f0000005540), 0x0, &(0x7f0000005580)=""/65, 0x41}, 0x95d}, {{&(0x7f0000005600)=@pptp={0x18, 0x2, {0x0, @private}}, 0x80, &(0x7f0000005680), 0x0, &(0x7f00000056c0)=""/4096, 0x1000}, 0x4}, {{&(0x7f00000066c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000009c80)=[{&(0x7f0000006740)=""/4096, 0x1000}, {&(0x7f0000007740)=""/87, 0x57}, {&(0x7f00000077c0)=""/203, 0xcb}, {&(0x7f00000078c0)=""/193, 0xc1}, {&(0x7f00000079c0)=""/7, 0x7}, {&(0x7f0000007a00)=""/4096, 0x1000}, {&(0x7f0000008a00)=""/159, 0x9f}, {&(0x7f0000008ac0)=""/218, 0xda}, {&(0x7f0000008bc0)=""/139, 0x8b}, {&(0x7f0000008c80)=""/4096, 0x1000}], 0xa, &(0x7f0000009d40)=""/225, 0xe1}, 0x100}], 0x9, 0x2120, &(0x7f000000a080)) accept(0xffffffffffffffff, &(0x7f000000a940)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f000000a040)=0x80) setsockopt$bt_BT_SECURITY(r8, 0x112, 0x4, &(0x7f000000a9c0)={0x3, 0x2}, 0x2) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f000000a3c0)=ANY=[@ANYBLOB="24000b00355b8595b7a953171890d1373c524968a00b04f1e0da690a9f5d94d76fe13288d0691b52a0a4ca77946e7bffcff4c9ece225a715252f42ca6a1cc4600325b687b6df4e3f264ba0021fba32f748a1fa9da128b7fddb967f695d123f6c536fdfaf52c9de894ef0b0b5924f2a564957b421683a4363faec04f3140e7d1f7f8d11a7abdd37015852831002be6ed871a091d52eed69c27d1d8075bc4264afce056d0e93122587480100370ace694ca89d2715b4c80fe764c3b957b5576d7e1e40b001bdeede070d1243ecd1851f4c84573259bca8469c83a02cacce4fb830c2e3c01ad85f88000000", @ANYRES16=r5, @ANYBLOB="100025bd7000fedbdf250200000008002b00080000000500330002000000"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) 20:35:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) [ 707.505565][T27689] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 707.524240][T27689] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 707.598943][T27691] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 707.608777][T27691] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 20:35:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:16 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="d3ab0000000000004e000929c2c2058b6f00"/30, 0x1e) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 20:35:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) [ 707.722016][T27694] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 707.733947][T27694] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 20:35:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:17 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) 20:35:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:17 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) 20:35:17 executing program 1: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket(0xa, 0x1, 0x0) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000000)={r3}, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000000c0)={r3, 0xb, "ff8227747f07965deb5975"}, &(0x7f0000000100)=0x13) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r7, r6, 0x0, 0x8000000000004) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000000)={0x0, @initdev, @remote}, &(0x7f0000000040)=0xc) setsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@rand_addr=0x64010101, @in6=@private2, 0x4e21, 0x0, 0x4e24, 0x1, 0x2, 0x180, 0x0, 0x0, r8, 0xee00}, {0x8, 0x7, 0xfff, 0x3f, 0x1, 0x8760000, 0x3, 0x1f}, {0x5, 0x6, 0x6, 0x6}, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d4, 0x33}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3502, 0x2, 0x0, 0x5, 0x100, 0x401, 0x8}}, 0xe8) sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 20:35:17 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:35:17 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="d3abc7990d535c9e70bc111c8eff7f0000000000004e000042d63321b666367b8f7a", 0x22) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000040)="a7cd7564987cb6b4eaf41254bc3caead1512a317a3045f654772ead541", 0x1d) 20:35:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:17 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) 20:35:17 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) sendfile(r2, r1, 0x0, 0x8000000000004) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) bind$rose(r0, 0x0, 0x0) 20:35:17 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x4) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="47b7c3fa", @ANYRES16=0x0, @ANYBLOB="020027bd7000fbdbdf250400000008000500000400003000028006000b000a000000080005000400000014000100ac1414aa00000000000000000000000006000e004e210000"], 0x4c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0x8000000000004) setsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f0000000000), 0x2) sendto$inet(r2, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0xf000) sendfile(r5, r6, 0x0, 0xf03b0000) sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000000000004) getsockopt$inet_sctp_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000240), &(0x7f0000000280)=0xe) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r2, 0x0, r0, 0x0, 0x7fffffff, 0x0) 20:35:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:17 executing program 3: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) sendfile(r2, r1, 0x0, 0x8000000000004) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) bind$rose(r0, 0x0, 0x0) 20:35:17 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r1, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) bind$rose(r1, 0x0, 0x0) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8, @default, @rose={'rose', 0x0}, 0x5, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @bcast, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) bind$alg(r3, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0xffffffffffffff89) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) r6 = accept4$nfc_llcp(r5, &(0x7f00000006c0), &(0x7f00000004c0)=0x60, 0x0) connect$nfc_llcp(r6, &(0x7f0000000740)={0x27, 0x1, 0x2, 0x7, 0xfe, 0x6, "ef17ee240487c2cb6b2ac53df37d378c962dee620fc904301975afa40f65f30901fcd2ad3278ef85d9901ec45aa6d555998408cfe6182ca5b4760c1b5cf79f", 0x11}, 0x60) r7 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 20:35:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) [ 708.783131][T27756] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. 20:35:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:18 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) [ 709.077494][T27758] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. 20:35:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:18 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x4) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="47b7c3fa", @ANYRES16=0x0, @ANYBLOB="020027bd7000fbdbdf250400000008000500000400003000028006000b000a000000080005000400000014000100ac1414aa00000000000000000000000006000e004e210000"], 0x4c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0x8000000000004) setsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f0000000000), 0x2) sendto$inet(r2, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0xf000) sendfile(r5, r6, 0x0, 0xf03b0000) sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000000000004) getsockopt$inet_sctp_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000240), &(0x7f0000000280)=0xe) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r2, 0x0, r0, 0x0, 0x7fffffff, 0x0) 20:35:18 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r3, r2, 0x0, 0x8000000000004) getsockopt$inet_opts(r3, 0x0, 0x1d, &(0x7f0000000000)=""/59, &(0x7f0000000040)=0x3b) 20:35:18 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) [ 709.421186][T27767] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. 20:35:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdf", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:18 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r1, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) bind$rose(r1, 0x0, 0x0) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8, @default, @rose={'rose', 0x0}, 0x5, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @bcast, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) bind$alg(r3, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0xffffffffffffff89) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) r6 = accept4$nfc_llcp(r5, &(0x7f00000006c0), &(0x7f00000004c0)=0x60, 0x0) connect$nfc_llcp(r6, &(0x7f0000000740)={0x27, 0x1, 0x2, 0x7, 0xfe, 0x6, "ef17ee240487c2cb6b2ac53df37d378c962dee620fc904301975afa40f65f30901fcd2ad3278ef85d9901ec45aa6d555998408cfe6182ca5b4760c1b5cf79f", 0x11}, 0x60) r7 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) [ 709.589003][T27773] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. 20:35:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdf", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:18 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="3400000010000104000020000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000140012000c00010062726964676500000300020092ab29e6bc90313f5c14a8d5d4534e466f18e765b4fd2a0e0ffabd5f884b8215627962f7a4aab6691329692afb3fdcc3e7378871f430fe0e63a139f8432b7c88d952fec2b4b0543063914575e89dce08917ef4c83982304f91f231dc1ecf62c4bf0541ff2b5060b6a4d69b9403c96422fd8632e43e946636599dedd725bcd83c8971198e43e29e4b1c15388e01dee5bf7c4e128ff5b5c146c15db0684e76186c1d4209d8b4158f7b359d8efa69231277e09c47884e9fb0b010687409fc6fa73c91c9504b4460a91a865e0897f10dc1c1e0edc0d560f18478d67cc5cf8dbb0ee5003f6cc7185e99bc93bcb9eb76abba12076a8d076c853092edf73f4224c4e770006630b3a7e43c7e4c90ce6a20fac946584d406aa1cc75103f746d1f026456e44c9a39c62eecdb8bb82ca275e24c5c9095cbc8a6701a2447f9f6e6e4a372717366f176f0e4df46e9e28ede8a00e2a8b3dc"], 0x34}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="3400000010000104000020000000000000000000", @ANYRES32=r5, @ANYBLOB="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"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="3400000010000104000020000000000000000000", @ANYRES32=r8, @ANYBLOB="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"], 0x34}}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4048045) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r9 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) [ 709.786205][T27781] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 709.865476][T27783] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 709.886823][T27786] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 20:35:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdf", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:19 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:35:19 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r2, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) ioctl(r2, 0x2, &(0x7f0000000000)="215c3f9437cb0751c52b9bf92db3bd69d073ae088719c5bcc32ed0e5310e61c5127f34997341bd3e1bf76b78366cd0012f3f31a5a60c2fbc59d410bf41c2da3688a023f2aacb99e23985d1f45489026d043d5af7076c9fe821d33ac2a6ea51b7d07a12f395d3ff611e2b47920c7fb2e7163a599758e5dabf03ea937218c355ca2a7a3a430eeaae8d7c7071d57ec348836063b6242e221517e741b16add93663b2929d3cdc5e763a47612d4e552d767dc28773c060b52") socketpair(0x3, 0x1, 0x1, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000300), 0x4) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 20:35:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:19 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) accept4(r0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)) 20:35:19 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r3, r2, 0x0, 0x8000000000004) getsockopt$inet_opts(r3, 0x0, 0x1d, &(0x7f0000000000)=""/59, &(0x7f0000000040)=0x3b) 20:35:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:19 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) close(r0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r3, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x13, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) 20:35:19 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f00000006c0)=""/102400, &(0x7f0000000180)=0x19000) accept4$alg(r1, 0x0, 0x0, 0x800) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r2, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r4 = socket$netlink(0x10, 0x3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000000004) getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000400), &(0x7f0000000440)=0x4) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0000100004800c000780080001001c0000007d3a"], 0x24}}, 0x0) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x170, r5, 0x204, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xa4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x709b}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'gre0\x00'}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffff000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x20044086}, 0x4040815) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f00000000c0)=0x1b, 0x4) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 20:35:19 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r1, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) bind$rose(r1, 0x0, 0x0) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8, @default, @rose={'rose', 0x0}, 0x5, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @bcast, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) bind$alg(r3, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0xffffffffffffff89) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) r6 = accept4$nfc_llcp(r5, &(0x7f00000006c0), &(0x7f00000004c0)=0x60, 0x0) connect$nfc_llcp(r6, &(0x7f0000000740)={0x27, 0x1, 0x2, 0x7, 0xfe, 0x6, "ef17ee240487c2cb6b2ac53df37d378c962dee620fc904301975afa40f65f30901fcd2ad3278ef85d9901ec45aa6d555998408cfe6182ca5b4760c1b5cf79f", 0x11}, 0x60) r7 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 20:35:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:19 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r3, r2, 0x0, 0x8000000000004) r5 = socket(0xa, 0x1, 0x0) close(r5) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000000)={r7}, 0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000000)={r7, 0x2}, 0x8) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) 20:35:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a3", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:20 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:35:20 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0xa2c8a9f5080bb5fd, &(0x7f0000000000)="5de2cc1ce3b403f0a8fb4528b3d8fc61f77967e8d94c1dfed1a105e0734be0e19c67cf4e9379b16ae9f6e22e0a17ccfdab748759617ca111e5021cd3a07d754ada73925ad2cf37953076097490c612fc4f0d1576d15e56b687c81e39a8487ae3056cc45040eb108cb519479a5702ca58d10cda08f8685e0ab856658eba7503705af94ef007c92a9bb8210d932153b99754ac08fd4a6cd844221f40a194ddd4ee32f964424d9ef8f97f79") bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-ce\x00'}, 0x58) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r2, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000540)={0x10001, 0x5, 0x2, 0x200000, 0xa, [{0x52, 0x4, 0x3, [], 0x500}, {0x80, 0x5, 0x8000}, {0x5, 0x8, 0x8000, [], 0x80}, {0x7, 0x4, 0x0, [], 0x204}, {0x6, 0x2, 0x20, [], 0x1088}, {0x7, 0x7, 0x0, [], 0x80}, {0xcd02, 0xe4, 0x3, [], 0x1305}, {0x0, 0x0, 0x5, [], 0x9}, {0x401, 0x3, 0xfff, [], 0x200}, {0x0, 0x6, 0x8, [], 0x80}]}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r1, 0x0, 0x8000000000004) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000001c0)="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", 0xfffffdef) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 20:35:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a3", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a3", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:20 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0x60, 0x80800) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0xe0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x6, 0x1}, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x80000000, 0x345d}, &(0x7f0000000240)=0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=0xd0d}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x10, &(0x7f0000000500)={&(0x7f0000000300)=""/163, 0xa3, r2}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r2, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r3, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) ioctl(r3, 0x0, &(0x7f0000000100)="080db5055e0bcfe847a071") ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) 20:35:20 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r2, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000000)="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") 20:35:20 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r1, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) bind$rose(r1, 0x0, 0x0) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8, @default, @rose={'rose', 0x0}, 0x5, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @bcast, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) bind$alg(r3, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0xffffffffffffff89) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) r6 = accept4$nfc_llcp(r5, &(0x7f00000006c0), &(0x7f00000004c0)=0x60, 0x0) connect$nfc_llcp(r6, &(0x7f0000000740)={0x27, 0x1, 0x2, 0x7, 0xfe, 0x6, "ef17ee240487c2cb6b2ac53df37d378c962dee620fc904301975afa40f65f30901fcd2ad3278ef85d9901ec45aa6d555998408cfe6182ca5b4760c1b5cf79f", 0x11}, 0x60) r7 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 20:35:20 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r1, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) recvmmsg(r1, &(0x7f0000006c80)=[{{&(0x7f0000000540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/2, 0x2}, {&(0x7f0000000600)=""/115, 0x73}], 0x2, &(0x7f0000000700)=""/55, 0x37}, 0x1f}, {{&(0x7f0000000740)=@ax25={{0x3, @bcast}, [@netrom, @default, @null, @remote, @null, @null, @rose, @default]}, 0x80, &(0x7f0000000980)=[{&(0x7f00000007c0)=""/235, 0xeb}, {&(0x7f00000008c0)=""/115, 0x73}, {&(0x7f0000000940)=""/63, 0x3f}], 0x3, &(0x7f00000009c0)=""/196, 0xc4}, 0x6}, {{&(0x7f0000000ac0)=@alg, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000b40)=""/91, 0x5b}, {&(0x7f0000000bc0)=""/89, 0x59}, {&(0x7f0000000c40)=""/222, 0xde}, {&(0x7f0000000d40)=""/173, 0xad}, {&(0x7f0000000e00)=""/138, 0x8a}, {&(0x7f0000000ec0)=""/133, 0x85}], 0x6, &(0x7f0000001000)=""/190, 0xbe}, 0x96c8}, {{&(0x7f00000010c0)=@generic, 0x80, &(0x7f00000034c0)=[{&(0x7f0000001140)=""/196, 0xc4}, {&(0x7f0000001240)=""/162, 0xa2}, {&(0x7f0000001300)=""/209, 0xd1}, {&(0x7f0000001400)=""/165, 0xa5}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/4096, 0x1000}], 0x6, &(0x7f0000003540)=""/221, 0xdd}, 0x200}, {{&(0x7f0000003640)=@hci, 0x80, &(0x7f0000003980)=[{&(0x7f00000036c0)=""/231, 0xe7}, {&(0x7f00000037c0)=""/33, 0x21}, {&(0x7f0000003800)=""/226, 0xe2}, {&(0x7f0000003900)=""/126, 0x7e}], 0x4, &(0x7f00000039c0)=""/4, 0x4}, 0x5}, {{&(0x7f0000003a00)=@can, 0x80, &(0x7f0000003a80), 0x0, &(0x7f0000003ac0)=""/19, 0x13}, 0x401}, {{&(0x7f0000003b00)=@generic, 0x80, &(0x7f0000003f80)=[{&(0x7f0000003b80)=""/184, 0xb8}, {&(0x7f0000003c40)=""/111, 0x6f}, {&(0x7f0000003cc0)=""/246, 0xf6}, {&(0x7f0000003dc0)=""/67, 0x43}, {&(0x7f0000003e40)=""/31, 0x1f}, {&(0x7f0000003e80)=""/226, 0xe2}], 0x6, &(0x7f0000004000)=""/150, 0x96}}, {{&(0x7f00000040c0)=@nl=@proc, 0x80, &(0x7f0000004240)=[{&(0x7f0000004140)=""/196, 0xc4}], 0x1}}, {{0x0, 0x0, &(0x7f0000005780)=[{&(0x7f0000004280)=""/4096, 0x1000}, {&(0x7f0000005280)=""/198, 0xc6}, {&(0x7f0000005380)=""/223, 0xdf}, {&(0x7f0000005480)=""/135, 0x87}, {&(0x7f0000005540)=""/112, 0x70}, {&(0x7f00000055c0)=""/201, 0xc9}, {&(0x7f00000056c0)=""/159, 0x9f}], 0x7, &(0x7f0000005800)=""/124, 0x7c}, 0x1}, {{0x0, 0x0, &(0x7f0000006b80)=[{&(0x7f0000005880)=""/74, 0x4a}, {&(0x7f0000005900)=""/192, 0xc0}, {&(0x7f00000059c0)=""/118, 0x76}, {&(0x7f0000005a40)=""/89, 0x59}, {&(0x7f0000005ac0)=""/4096, 0x1000}, {&(0x7f0000006ac0)=""/137, 0x89}], 0x6, &(0x7f0000006c00)=""/72, 0x48}, 0x7}], 0xa, 0x10000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b0000) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000000)=0x3, 0x4) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r3, r2, 0x0, 0x8000000000004) bind$alg(r3, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0xfffffe56) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0xfffffffc, @local}, @parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x8, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, @loopback, @broadcast}}}}}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r6 = accept4(r5, 0x0, 0x0, 0x800) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0, 0xfffffd96}, 0x1, 0x0, 0x0, 0x80}, 0x20004804) 20:35:21 executing program 3: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r3, r2, 0x0, 0x8000000000004) r5 = socket(0xa, 0x1, 0x0) close(r5) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000000)={r7}, 0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000000)={r7, 0x2}, 0x8) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) 20:35:21 executing program 5: pipe(&(0x7f0000000380)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000040)={'raw\x00', 0x2, [{}, {}]}, 0x48) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r4, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x28, 0x140d, 0x8, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048000}, 0x30000000) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") getsockopt$netlink(r3, 0x10e, 0x3, &(0x7f0000000000)=""/4, &(0x7f0000000180)=0xfffffe3c) splice(r2, 0x0, r0, 0x0, 0x7ffffffe, 0x0) 20:35:21 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0xa, 0x0) 20:35:21 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:35:21 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = socket(0xa, 0x1, 0x0) close(r3) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000000)={r5}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={r5, 0x20, 0x30}, &(0x7f0000000100)=0xc) bind$inet(r2, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) sendfile(r7, r8, 0x0, 0x6) sendfile(r7, r6, 0x0, 0x8000000000004) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000180)) setsockopt$PNPIPE_HANDLE(r7, 0x113, 0x3, &(0x7f0000000000)=0xfffffffb, 0x4) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) 20:35:21 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0xa, 0x0) 20:35:21 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0xa, 0x0) 20:35:21 executing program 1 (fault-call:1 fault-nth:0): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) [ 712.620160][T27885] FAULT_INJECTION: forcing a failure. [ 712.620160][T27885] name failslab, interval 1, probability 0, space 0, times 0 [ 712.634765][T27885] CPU: 1 PID: 27885 Comm: syz-executor.1 Not tainted 5.7.0-rc5-syzkaller #0 [ 712.643473][T27885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 712.653798][T27885] Call Trace: [ 712.657129][T27885] dump_stack+0x188/0x20d [ 712.661667][T27885] should_fail.cold+0x5/0xa [ 712.666192][T27885] ? lock_downgrade+0x840/0x840 [ 712.671071][T27885] ? fault_create_debugfs_attr+0x140/0x140 [ 712.677598][T27885] should_failslab+0x5/0xf [ 712.682031][T27885] kmem_cache_alloc_node+0x25c/0x760 [ 712.687338][T27885] __alloc_skb+0xba/0x5a0 [ 712.691678][T27885] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 712.697249][T27885] ? netlink_autobind.isra.0+0x21b/0x300 [ 712.702898][T27885] netlink_sendmsg+0x97b/0xe10 [ 712.707687][T27885] ? aa_af_perm+0x260/0x260 [ 712.712193][T27885] ? netlink_unicast+0x740/0x740 [ 712.717526][T27885] ? netlink_unicast+0x740/0x740 [ 712.722572][T27885] sock_sendmsg+0xcf/0x120 [ 712.727096][T27885] ____sys_sendmsg+0x6bf/0x7e0 [ 712.734538][T27885] ? kernel_sendmsg+0x50/0x50 [ 712.739313][T27885] ? _parse_integer+0x180/0x180 [ 712.744436][T27885] ___sys_sendmsg+0x100/0x170 [ 712.749145][T27885] ? sendmsg_copy_msghdr+0x70/0x70 [ 712.754265][T27885] ? __fget_files+0x32f/0x500 [ 712.758953][T27885] ? ksys_dup3+0x3c0/0x3c0 [ 712.763573][T27885] ? __fget_light+0x20e/0x270 [ 712.768543][T27885] __sys_sendmsg+0xec/0x1b0 [ 712.773177][T27885] ? __sys_sendmsg_sock+0xb0/0xb0 [ 712.778656][T27885] ? vfs_write+0x161/0x5d0 [ 712.783301][T27885] ? trace_hardirqs_off_caller+0x55/0x230 [ 712.789270][T27885] ? do_syscall_64+0x21/0x7d0 [ 712.793970][T27885] do_syscall_64+0xf6/0x7d0 [ 712.798581][T27885] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 712.804506][T27885] RIP: 0033:0x45ca29 [ 712.808414][T27885] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 712.828126][T27885] RSP: 002b:00007f34e1049c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 712.836637][T27885] RAX: ffffffffffffffda RBX: 0000000000500f40 RCX: 000000000045ca29 [ 712.844655][T27885] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 712.852763][T27885] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 712.861273][T27885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 20:35:22 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) [ 712.869884][T27885] R13: 0000000000000a04 R14: 00000000004ccdcc R15: 00007f34e104a6d4 20:35:22 executing program 2 (fault-call:1 fault-nth:0): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:22 executing program 3 (fault-call:2 fault-nth:0): setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:35:22 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) 20:35:22 executing program 1 (fault-call:1 fault-nth:1): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) [ 713.044084][T27894] FAULT_INJECTION: forcing a failure. [ 713.044084][T27894] name failslab, interval 1, probability 0, space 0, times 0 [ 713.058940][T27894] CPU: 1 PID: 27894 Comm: syz-executor.3 Not tainted 5.7.0-rc5-syzkaller #0 [ 713.068244][T27894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 713.078483][T27894] Call Trace: [ 713.081791][T27894] dump_stack+0x188/0x20d [ 713.086486][T27894] should_fail.cold+0x5/0xa [ 713.091001][T27894] ? lock_downgrade+0x840/0x840 [ 713.096054][T27894] ? fault_create_debugfs_attr+0x140/0x140 [ 713.101909][T27894] should_failslab+0x5/0xf [ 713.106340][T27894] kmem_cache_alloc_node+0x25c/0x760 [ 713.111675][T27894] __alloc_skb+0xba/0x5a0 [ 713.116168][T27894] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 713.117064][T27901] FAULT_INJECTION: forcing a failure. [ 713.117064][T27901] name failslab, interval 1, probability 0, space 0, times 0 [ 713.121725][T27894] ? netlink_autobind.isra.0+0x21b/0x300 [ 713.121746][T27894] netlink_sendmsg+0x97b/0xe10 [ 713.121766][T27894] ? aa_af_perm+0x260/0x260 [ 713.121779][T27894] ? netlink_unicast+0x740/0x740 [ 713.121800][T27894] ? netlink_unicast+0x740/0x740 [ 713.121816][T27894] sock_sendmsg+0xcf/0x120 [ 713.121834][T27894] ____sys_sendmsg+0x6bf/0x7e0 [ 713.121853][T27894] ? kernel_sendmsg+0x50/0x50 [ 713.121885][T27894] ___sys_sendmsg+0x100/0x170 [ 713.180391][T27894] ? sendmsg_copy_msghdr+0x70/0x70 [ 713.185524][T27894] ? __fget_files+0x32f/0x500 [ 713.190211][T27894] ? ksys_dup3+0x3c0/0x3c0 [ 713.194722][T27894] ? __fget_light+0x20e/0x270 [ 713.199411][T27894] __sys_sendmsg+0xec/0x1b0 [ 713.203945][T27894] ? __sys_sendmsg_sock+0xb0/0xb0 [ 713.209071][T27894] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 713.215193][T27894] ? vfs_write+0x161/0x5d0 [ 713.219635][T27894] ? trace_hardirqs_off_caller+0x55/0x230 [ 713.225382][T27894] ? do_syscall_64+0x21/0x7d0 [ 713.230078][T27894] do_syscall_64+0xf6/0x7d0 [ 713.234599][T27894] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 713.240488][T27894] RIP: 0033:0x45ca29 [ 713.244376][T27894] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 713.264148][T27894] RSP: 002b:00007f668cc42c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 713.272560][T27894] RAX: ffffffffffffffda RBX: 0000000000500f40 RCX: 000000000045ca29 [ 713.280554][T27894] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 713.288896][T27894] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 713.296878][T27894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 713.304900][T27894] R13: 0000000000000a04 R14: 00000000004ccdcc R15: 00007f668cc436d4 [ 713.312897][T27901] CPU: 0 PID: 27901 Comm: syz-executor.1 Not tainted 5.7.0-rc5-syzkaller #0 [ 713.321697][T27901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 713.331854][T27901] Call Trace: [ 713.335155][T27901] dump_stack+0x188/0x20d [ 713.340284][T27901] should_fail.cold+0x5/0xa [ 713.345063][T27901] ? lock_downgrade+0x840/0x840 [ 713.349929][T27901] ? fault_create_debugfs_attr+0x140/0x140 [ 713.355758][T27901] should_failslab+0x5/0xf [ 713.360188][T27901] kmem_cache_alloc_node_trace+0x27c/0x790 [ 713.366016][T27901] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 713.372123][T27901] __kmalloc_node_track_caller+0x38/0x60 [ 713.378330][T27901] __kmalloc_reserve.isra.0+0x39/0xe0 [ 713.383721][T27901] __alloc_skb+0xef/0x5a0 [ 713.388056][T27901] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 713.393892][T27901] ? netlink_autobind.isra.0+0x21b/0x300 [ 713.399661][T27901] netlink_sendmsg+0x97b/0xe10 [ 713.404124][T27903] FAULT_INJECTION: forcing a failure. [ 713.404124][T27903] name failslab, interval 1, probability 0, space 0, times 0 [ 713.404530][T27901] ? aa_af_perm+0x260/0x260 [ 713.421595][T27901] ? netlink_unicast+0x740/0x740 [ 713.426565][T27901] ? netlink_unicast+0x740/0x740 [ 713.431510][T27901] sock_sendmsg+0xcf/0x120 [ 713.436061][T27901] ____sys_sendmsg+0x6bf/0x7e0 [ 713.440832][T27901] ? kernel_sendmsg+0x50/0x50 [ 713.445498][T27901] ? _parse_integer+0x180/0x180 [ 713.450436][T27901] ___sys_sendmsg+0x100/0x170 [ 713.455112][T27901] ? sendmsg_copy_msghdr+0x70/0x70 [ 713.460312][T27901] ? __fget_files+0x32f/0x500 [ 713.465091][T27901] ? ksys_dup3+0x3c0/0x3c0 [ 713.469499][T27901] ? __fget_light+0x20e/0x270 [ 713.474166][T27901] __sys_sendmsg+0xec/0x1b0 [ 713.478660][T27901] ? __sys_sendmsg_sock+0xb0/0xb0 [ 713.483675][T27901] ? vfs_write+0x161/0x5d0 [ 713.488100][T27901] ? trace_hardirqs_off_caller+0x55/0x230 [ 713.493840][T27901] ? do_syscall_64+0x21/0x7d0 [ 713.498505][T27901] do_syscall_64+0xf6/0x7d0 [ 713.502999][T27901] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 713.509239][T27901] RIP: 0033:0x45ca29 [ 713.513123][T27901] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 713.532988][T27901] RSP: 002b:00007f34e1049c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 713.541488][T27901] RAX: ffffffffffffffda RBX: 0000000000500f40 RCX: 000000000045ca29 [ 713.549534][T27901] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 713.559747][T27901] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 713.569258][T27901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 713.577241][T27901] R13: 0000000000000a04 R14: 00000000004ccdcc R15: 00007f34e104a6d4 [ 713.585334][T27903] CPU: 1 PID: 27903 Comm: syz-executor.2 Not tainted 5.7.0-rc5-syzkaller #0 20:35:22 executing program 3 (fault-call:2 fault-nth:1): setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:35:22 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000000004) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = socket(0xa, 0x1, 0x0) close(r4) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0)={0x0, 0x0, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000040)=@sack_info={r6, 0x20, 0x48}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r7, 0x3}, 0xc) r8 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r8, 0x1, 0x23, &(0x7f0000000000)=0x401, 0x4) sendmsg$L2TP_CMD_SESSION_CREATE(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 20:35:22 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r2, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x20040010) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087f9, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000280)="0c268a927f1f65aa6913191241ba7860005cf65ac618ded8b70c51abeaf4cc834ff922b3f1e0b02bd67aa03059bc0000a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x4d, 0x44070, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="2d72646d61202d70696473202b696f20c7052c6661202b72646d61201072646d61202b637075202d63707520"], 0x31) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f00000001c0), &(0x7f0000000300)=0x4) sendfile(r4, r3, 0x0, 0x8000000000004) r6 = openat$cgroup_ro(r3, &(0x7f0000000200)='cpu.stat\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r7, r6, 0x0, 0x8000000000004) setsockopt$packet_int(r7, 0x107, 0x11, &(0x7f0000000000)=0xfff, 0x4) [ 713.594186][T27903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 713.604423][T27903] Call Trace: [ 713.607734][T27903] dump_stack+0x188/0x20d [ 713.612092][T27903] should_fail.cold+0x5/0xa [ 713.616622][T27903] ? lock_downgrade+0x840/0x840 [ 713.621667][T27903] ? fault_create_debugfs_attr+0x140/0x140 [ 713.627948][T27903] should_failslab+0x5/0xf [ 713.632655][T27903] kmem_cache_alloc_node+0x25c/0x760 [ 713.638069][T27903] __alloc_skb+0xba/0x5a0 20:35:22 executing program 1 (fault-call:1 fault-nth:2): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) [ 713.642547][T27903] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 713.648112][T27903] ? netlink_autobind.isra.0+0x21b/0x300 [ 713.653856][T27903] netlink_sendmsg+0x97b/0xe10 [ 713.659090][T27903] ? aa_af_perm+0x260/0x260 [ 713.663621][T27903] ? netlink_unicast+0x740/0x740 [ 713.664178][T27909] FAULT_INJECTION: forcing a failure. [ 713.664178][T27909] name failslab, interval 1, probability 0, space 0, times 0 [ 713.668571][T27903] ? netlink_unicast+0x740/0x740 [ 713.668592][T27903] sock_sendmsg+0xcf/0x120 [ 713.668609][T27903] ____sys_sendmsg+0x6bf/0x7e0 [ 713.668628][T27903] ? kernel_sendmsg+0x50/0x50 [ 713.702105][T27903] ? _parse_integer+0x180/0x180 [ 713.707019][T27903] ___sys_sendmsg+0x100/0x170 [ 713.711927][T27903] ? sendmsg_copy_msghdr+0x70/0x70 [ 713.717686][T27903] ? __fget_files+0x32f/0x500 [ 713.723366][T27903] ? ksys_dup3+0x3c0/0x3c0 [ 713.728094][T27903] ? __fget_light+0x20e/0x270 [ 713.733258][T27903] __sys_sendmsg+0xec/0x1b0 [ 713.737888][T27903] ? __sys_sendmsg_sock+0xb0/0xb0 [ 713.743123][T27903] ? vfs_write+0x161/0x5d0 [ 713.747617][T27903] ? trace_hardirqs_off_caller+0x55/0x230 [ 713.753575][T27903] ? do_syscall_64+0x21/0x7d0 [ 713.758361][T27903] do_syscall_64+0xf6/0x7d0 [ 713.763213][T27903] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 713.769098][T27903] RIP: 0033:0x45ca29 [ 713.773012][T27903] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 713.793218][T27903] RSP: 002b:00007f37dd1aec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 713.801637][T27903] RAX: ffffffffffffffda RBX: 0000000000500f40 RCX: 000000000045ca29 [ 713.809617][T27903] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 713.817680][T27903] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 713.825643][T27903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 713.833611][T27903] R13: 0000000000000a04 R14: 00000000004ccdcc R15: 00007f37dd1af6d4 [ 713.853518][T27909] CPU: 0 PID: 27909 Comm: syz-executor.1 Not tainted 5.7.0-rc5-syzkaller #0 [ 713.862266][T27909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 713.872417][T27909] Call Trace: [ 713.875733][T27909] dump_stack+0x188/0x20d [ 713.880176][T27909] should_fail.cold+0x5/0xa [ 713.884717][T27909] ? fault_create_debugfs_attr+0x140/0x140 [ 713.890541][T27909] ? lock_acquire+0x1f2/0x8f0 [ 713.895240][T27909] ? netlink_deliver_tap+0x146/0xb50 [ 713.900636][T27909] should_failslab+0x5/0xf [ 713.905075][T27909] kmem_cache_alloc+0x44/0x740 [ 713.909858][T27909] ? lock_downgrade+0x840/0x840 [ 713.914765][T27909] skb_clone+0x14d/0x3c0 [ 713.919034][T27909] netlink_deliver_tap+0x91c/0xb50 [ 713.924281][T27909] netlink_unicast+0x5e9/0x740 [ 713.926570][T27913] FAULT_INJECTION: forcing a failure. [ 713.926570][T27913] name failslab, interval 1, probability 0, space 0, times 0 [ 713.929337][T27909] ? netlink_attachskb+0x810/0x810 [ 713.929353][T27909] ? _copy_from_iter_full+0x25c/0x870 [ 713.929434][T27909] ? __phys_addr_symbol+0x2c/0x70 [ 713.929486][T27909] ? __check_object_size+0x171/0x437 [ 713.962859][T27909] netlink_sendmsg+0x882/0xe10 [ 713.967638][T27909] ? aa_af_perm+0x260/0x260 [ 713.972787][T27909] ? netlink_unicast+0x740/0x740 [ 713.977747][T27909] ? netlink_unicast+0x740/0x740 [ 713.982795][T27909] sock_sendmsg+0xcf/0x120 [ 713.987261][T27909] ____sys_sendmsg+0x6bf/0x7e0 [ 713.992053][T27909] ? kernel_sendmsg+0x50/0x50 [ 713.996780][T27909] ? _parse_integer+0x180/0x180 [ 714.001660][T27909] ___sys_sendmsg+0x100/0x170 [ 714.006364][T27909] ? sendmsg_copy_msghdr+0x70/0x70 [ 714.011511][T27909] ? __fget_files+0x32f/0x500 [ 714.016643][T27909] ? ksys_dup3+0x3c0/0x3c0 [ 714.021091][T27909] ? __fget_light+0x20e/0x270 [ 714.025895][T27909] __sys_sendmsg+0xec/0x1b0 [ 714.030416][T27909] ? __sys_sendmsg_sock+0xb0/0xb0 [ 714.035459][T27909] ? vfs_write+0x161/0x5d0 [ 714.039910][T27909] ? trace_hardirqs_off_caller+0x55/0x230 [ 714.045665][T27909] ? do_syscall_64+0x21/0x7d0 [ 714.050390][T27909] do_syscall_64+0xf6/0x7d0 [ 714.054923][T27909] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 714.060831][T27909] RIP: 0033:0x45ca29 [ 714.064741][T27909] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 714.084655][T27909] RSP: 002b:00007f34e1049c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 714.093432][T27909] RAX: ffffffffffffffda RBX: 0000000000500f40 RCX: 000000000045ca29 20:35:23 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x0, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) [ 714.101456][T27909] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 714.110606][T27909] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 714.118588][T27909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 714.126574][T27909] R13: 0000000000000a04 R14: 00000000004ccdcc R15: 00007f34e104a6d4 [ 714.134981][T27913] CPU: 1 PID: 27913 Comm: syz-executor.3 Not tainted 5.7.0-rc5-syzkaller #0 [ 714.143852][T27913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 714.154525][T27913] Call Trace: [ 714.157836][T27913] dump_stack+0x188/0x20d [ 714.162189][T27913] should_fail.cold+0x5/0xa [ 714.166726][T27913] ? lock_downgrade+0x840/0x840 [ 714.171719][T27913] ? fault_create_debugfs_attr+0x140/0x140 [ 714.177558][T27913] should_failslab+0x5/0xf [ 714.182000][T27913] kmem_cache_alloc_node_trace+0x27c/0x790 [ 714.187908][T27913] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 714.194270][T27913] __kmalloc_node_track_caller+0x38/0x60 [ 714.200112][T27913] __kmalloc_reserve.isra.0+0x39/0xe0 [ 714.205512][T27913] __alloc_skb+0xef/0x5a0 [ 714.209868][T27913] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 714.215448][T27913] ? netlink_autobind.isra.0+0x21b/0x300 [ 714.221217][T27913] netlink_sendmsg+0x97b/0xe10 [ 714.226009][T27913] ? aa_af_perm+0x260/0x260 [ 714.226773][T27909] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 714.230540][T27913] ? netlink_unicast+0x740/0x740 [ 714.230569][T27913] ? netlink_unicast+0x740/0x740 [ 714.230589][T27913] sock_sendmsg+0xcf/0x120 [ 714.230608][T27913] ____sys_sendmsg+0x6bf/0x7e0 [ 714.230625][T27913] ? kernel_sendmsg+0x50/0x50 [ 714.230641][T27913] ? _parse_integer+0x180/0x180 [ 714.230665][T27913] ___sys_sendmsg+0x100/0x170 [ 714.230682][T27913] ? sendmsg_copy_msghdr+0x70/0x70 [ 714.230707][T27913] ? __fget_files+0x32f/0x500 [ 714.230724][T27913] ? ksys_dup3+0x3c0/0x3c0 [ 714.230744][T27913] ? __fget_light+0x20e/0x270 [ 714.230763][T27913] __sys_sendmsg+0xec/0x1b0 [ 714.230776][T27913] ? __sys_sendmsg_sock+0xb0/0xb0 [ 714.230790][T27913] ? vfs_write+0x161/0x5d0 [ 714.230815][T27913] ? trace_hardirqs_off_caller+0x55/0x230 [ 714.230835][T27913] ? do_syscall_64+0x21/0x7d0 [ 714.230854][T27913] do_syscall_64+0xf6/0x7d0 [ 714.230874][T27913] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 714.230886][T27913] RIP: 0033:0x45ca29 [ 714.230901][T27913] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 20:35:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) [ 714.230909][T27913] RSP: 002b:00007f668cc42c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 714.230923][T27913] RAX: ffffffffffffffda RBX: 0000000000500f40 RCX: 000000000045ca29 [ 714.230932][T27913] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 714.230940][T27913] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 714.230948][T27913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 714.230956][T27913] R13: 0000000000000a04 R14: 00000000004ccdcc R15: 00007f668cc436d4 20:35:23 executing program 3 (fault-call:2 fault-nth:2): setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 714.548210][T27927] FAULT_INJECTION: forcing a failure. [ 714.548210][T27927] name failslab, interval 1, probability 0, space 0, times 0 [ 714.562511][T27927] CPU: 1 PID: 27927 Comm: syz-executor.3 Not tainted 5.7.0-rc5-syzkaller #0 [ 714.571203][T27927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 714.581255][T27927] Call Trace: [ 714.584569][T27927] dump_stack+0x188/0x20d [ 714.588903][T27927] should_fail.cold+0x5/0xa [ 714.593413][T27927] ? fault_create_debugfs_attr+0x140/0x140 [ 714.599227][T27927] ? lock_acquire+0x1f2/0x8f0 [ 714.603894][T27927] ? netlink_deliver_tap+0x146/0xb50 [ 714.609185][T27927] should_failslab+0x5/0xf [ 714.613599][T27927] kmem_cache_alloc+0x44/0x740 [ 714.618360][T27927] ? lock_downgrade+0x840/0x840 [ 714.623285][T27927] skb_clone+0x14d/0x3c0 [ 714.627539][T27927] netlink_deliver_tap+0x91c/0xb50 [ 714.632640][T27927] netlink_unicast+0x5e9/0x740 [ 714.637401][T27927] ? netlink_attachskb+0x810/0x810 [ 714.642511][T27927] ? _copy_from_iter_full+0x25c/0x870 [ 714.647899][T27927] ? __phys_addr_symbol+0x2c/0x70 [ 714.652929][T27927] ? __check_object_size+0x171/0x437 [ 714.658213][T27927] netlink_sendmsg+0x882/0xe10 [ 714.662976][T27927] ? aa_af_perm+0x260/0x260 [ 714.667483][T27927] ? netlink_unicast+0x740/0x740 [ 714.672421][T27927] ? netlink_unicast+0x740/0x740 [ 714.677370][T27927] sock_sendmsg+0xcf/0x120 [ 714.681786][T27927] ____sys_sendmsg+0x6bf/0x7e0 [ 714.686540][T27927] ? kernel_sendmsg+0x50/0x50 [ 714.691369][T27927] ? _parse_integer+0x180/0x180 [ 714.696305][T27927] ___sys_sendmsg+0x100/0x170 [ 714.700971][T27927] ? sendmsg_copy_msghdr+0x70/0x70 [ 714.706084][T27927] ? __fget_files+0x32f/0x500 [ 714.710762][T27927] ? ksys_dup3+0x3c0/0x3c0 [ 714.715168][T27927] ? __fget_light+0x20e/0x270 [ 714.719847][T27927] __sys_sendmsg+0xec/0x1b0 [ 714.724341][T27927] ? __sys_sendmsg_sock+0xb0/0xb0 [ 714.729355][T27927] ? vfs_write+0x161/0x5d0 [ 714.733763][T27927] ? trace_hardirqs_off_caller+0x55/0x230 [ 714.739472][T27927] ? do_syscall_64+0x21/0x7d0 [ 714.744161][T27927] do_syscall_64+0xf6/0x7d0 [ 714.748666][T27927] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 714.754540][T27927] RIP: 0033:0x45ca29 [ 714.758420][T27927] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 714.778017][T27927] RSP: 002b:00007f668cc42c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 714.786419][T27927] RAX: ffffffffffffffda RBX: 0000000000500f40 RCX: 000000000045ca29 [ 714.794392][T27927] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 714.802463][T27927] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 714.810459][T27927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 714.818442][T27927] R13: 0000000000000a04 R14: 00000000004ccdcc R15: 00007f668cc436d4 20:35:24 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000001340)="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", 0x1000) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) [ 714.900388][T27923] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 20:35:24 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) sendfile(r2, r1, 0x0, 0x8000000000004) bind$alg(r2, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r4, 0x65, 0x5, &(0x7f00000025c0), 0x4) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) bind$can_raw(r4, &(0x7f0000000080)={0x1d, r5}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r6, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000000000000a004e210000000820010000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018010000000a004e2000010000fc000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000013"], 0x110) r7 = accept4(r6, 0x0, 0x0, 0x80400) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010400000000000000010000000000000002410000001000137564703a73797a320000000000"], 0x2c}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 20:35:24 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x0, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) [ 714.962743][T27927] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 20:35:24 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000000)) r1 = socket$inet(0x2, 0x4, 0x2) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ee6f7ae55d88fecf90b1a7511bf746bec66ba", 0x4d, 0x200440f0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) 20:35:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:24 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x0, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:35:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) [ 715.205264][T27955] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 20:35:24 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r2, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="580000000d1400012cbd7000fddbdf2508000100020000000800030088cd796a2e492f0f6e9ff29fcebd54c00000000008000100020100000800030004000000080003000200000008000100000000000800010002000000"], 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) 20:35:24 executing program 3 (fault-call:2 fault-nth:3): setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:35:24 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) [ 715.436020][T27970] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 715.516350][T27978] FAULT_INJECTION: forcing a failure. [ 715.516350][T27978] name failslab, interval 1, probability 0, space 0, times 0 [ 715.586736][T27978] CPU: 0 PID: 27978 Comm: syz-executor.3 Not tainted 5.7.0-rc5-syzkaller #0 [ 715.595646][T27978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 715.605709][T27978] Call Trace: [ 715.609015][T27978] dump_stack+0x188/0x20d [ 715.613375][T27978] should_fail.cold+0x5/0xa [ 715.617906][T27978] ? fault_create_debugfs_attr+0x140/0x140 [ 715.623745][T27978] should_failslab+0x5/0xf [ 715.628180][T27978] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 715.633578][T27978] rtnl_newlink+0x46/0xa0 [ 715.637923][T27978] ? __rtnl_newlink+0x1590/0x1590 [ 715.643308][T27978] rtnetlink_rcv_msg+0x44e/0xad0 [ 715.648619][T27978] ? rtnl_bridge_getlink+0x870/0x870 [ 715.654021][T27978] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 715.659340][T27978] ? __copy_skb_header+0x270/0x5b0 [ 715.664468][T27978] ? skb_splice_bits+0x1a0/0x1a0 [ 715.669441][T27978] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 715.675304][T27978] ? kmem_cache_alloc+0x261/0x740 [ 715.680346][T27978] netlink_rcv_skb+0x15a/0x410 [ 715.685155][T27978] ? rtnl_bridge_getlink+0x870/0x870 [ 715.690603][T27978] ? netlink_ack+0xa10/0xa10 [ 715.695364][T27978] netlink_unicast+0x537/0x740 [ 715.700270][T27978] ? netlink_attachskb+0x810/0x810 [ 715.705401][T27978] ? _copy_from_iter_full+0x25c/0x870 [ 715.710885][T27978] ? __phys_addr_symbol+0x2c/0x70 [ 715.715931][T27978] ? __check_object_size+0x171/0x437 [ 715.721243][T27978] netlink_sendmsg+0x882/0xe10 [ 715.726201][T27978] ? aa_af_perm+0x260/0x260 [ 715.731052][T27978] ? netlink_unicast+0x740/0x740 [ 715.736009][T27978] ? netlink_unicast+0x740/0x740 [ 715.741053][T27978] sock_sendmsg+0xcf/0x120 [ 715.745502][T27978] ____sys_sendmsg+0x6bf/0x7e0 [ 715.750553][T27978] ? kernel_sendmsg+0x50/0x50 [ 715.755260][T27978] ? _parse_integer+0x180/0x180 [ 715.760124][T27978] ___sys_sendmsg+0x100/0x170 [ 715.764891][T27978] ? sendmsg_copy_msghdr+0x70/0x70 [ 715.770033][T27978] ? __fget_files+0x32f/0x500 [ 715.774741][T27978] ? ksys_dup3+0x3c0/0x3c0 [ 715.779216][T27978] ? __fget_light+0x20e/0x270 [ 715.783916][T27978] __sys_sendmsg+0xec/0x1b0 [ 715.788425][T27978] ? __sys_sendmsg_sock+0xb0/0xb0 [ 715.793447][T27978] ? vfs_write+0x161/0x5d0 [ 715.797894][T27978] ? trace_hardirqs_off_caller+0x55/0x230 [ 715.803637][T27978] ? do_syscall_64+0x21/0x7d0 [ 715.808417][T27978] do_syscall_64+0xf6/0x7d0 [ 715.812922][T27978] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 715.818814][T27978] RIP: 0033:0x45ca29 [ 715.822736][T27978] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 715.842520][T27978] RSP: 002b:00007f668cc42c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 715.851381][T27978] RAX: ffffffffffffffda RBX: 0000000000500f40 RCX: 000000000045ca29 [ 715.859362][T27978] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 715.867918][T27978] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 715.876218][T27978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 20:35:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:25 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x45ffd, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="0100000007000000000003000000ff000000000000007a51ec405b49e278af59fd6f18e962b7e4560260d650d22aa1f823dc34167042c1c8bc49a68bda43e5a4fbe47909eacc317593becd608c33606aeae5f4b3a5474921509a285d036b0e4dde33fe0aab9273bc967f89ba91d325225b4b46082897849a4168399d5c86276363093d9fc43717bc3baa28564fede896bb62b7d1b2ac2a5b4bc4fb935f3cf5843097d3195a687180e430caae360f76adb221a9b2b1ba4e4acd03b14e104a72647db74d96d66687872aab4204a75241df754ccb3d1367c69ffdb2444cb22054e428712aebc2431410ade4c7e7e4fc7fcad9ac8d8e5582b6b9c452275d3e226ac5ba39eb79170fa8f2bb88d51263cac0c8fb8a6fb45705d321c9fdff178e9800dda4d5bbc4ff98bdcc13883886022c5394b7d7bbe850a8a96bc952d2ef56d95fa3c855586223f725d1606f72b48bfc2b79d591d6ce5a7a27b0be58e2dfd0c969c2814429357aa6ebbddf9566ed324ade02a87fe20fb2295782bc72b2b741b0c0fd7bf5a06119a947442eec34a6d745e1000000000000000000000000008c08a080270abdd962a95a601a63e95a77a813ef8f3fbf3db3f23578a6141ea0f9b5292872c8e9090e1b7af41d2f3cb054cec0f772aaf75d0a3e7c09dd227baeff6b0bccee7fc9eebb986f1fc6b623a9f8dda35862"], 0x3}}, 0x0) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000100)={&(0x7f0000000140), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x400, 0x70b526, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200000d6}, 0x200048c1) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) [ 715.884441][T27978] R13: 0000000000000a04 R14: 00000000004ccdcc R15: 00007f668cc436d4 20:35:25 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) [ 715.976922][T27982] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 716.057245][T27970] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 20:35:25 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x8000000000004) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000002c0)={&(0x7f00000006c0)="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", &(0x7f0000000000)=""/104, &(0x7f0000000080)="3e07850f84442c4e72cf7822bf08e042e51b19f2931dd1a9cdb8578b270463dff11bacda53e529d93b7cf19078457c419fc94d0889175dede66838d96e9a52503c1be5772b728fc34e717733e4e4919aab5e423fd38b722fbc0aa14fb6761ba85fd02e23a29bf7c03b3befc10c2e573443cc25f94b0b123bb84a4de2ec9d973b9422f77d28ae2c6cda32a5125a7044b041f8a07b", &(0x7f00000001c0)="f999b45e7a7d2e42d3a9b3d3ffa60262cd37f70e6ebefb38a591aff6ed06bd85dbaee0802829d96c9120ecc338de5374214b0914bac9297091da233e2de6bae60bd388c8db238a7aebbd0200aeff474548021b0e6d9a05aea4ee4659214745c0e91e9f8868097e9ff67f5b8a350a8b487ba50e990f90a326783f992dd29270d50824a105e9a497c217a64fd30c66178bcb70eee4169385337a9e5617034a3407b9805144d8198609d826c47c4bc688ae528c1f2aab2e0993438ef227f030d050185b22b82eaa5c5b8133575bce267d2a35c0b287f55729", 0x8, r1}, 0x38) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 20:35:25 executing program 3 (fault-call:2 fault-nth:4): setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:35:25 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x8000000000004) r4 = openat$cgroup_ro(r2, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000040)={0x40000001}) 20:35:25 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) [ 716.164184][T28000] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 716.178107][T28000] FAULT_INJECTION: forcing a failure. [ 716.178107][T28000] name failslab, interval 1, probability 0, space 0, times 0 [ 716.221430][T28000] CPU: 1 PID: 28000 Comm: syz-executor.3 Not tainted 5.7.0-rc5-syzkaller #0 [ 716.230246][T28000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 716.240315][T28000] Call Trace: [ 716.243626][T28000] dump_stack+0x188/0x20d [ 716.247980][T28000] should_fail.cold+0x5/0xa [ 716.252506][T28000] ? fault_create_debugfs_attr+0x140/0x140 [ 716.258337][T28000] should_failslab+0x5/0xf [ 716.262763][T28000] kmem_cache_alloc_node_trace+0x27c/0x790 [ 716.268650][T28000] ? apparmor_capable+0x454/0x8a0 [ 716.273685][T28000] ? apparmor_capable+0x454/0x8a0 [ 716.278778][T28000] ? pointer+0x7c0/0x7c0 [ 716.283048][T28000] ? apparmor_cred_prepare+0x750/0x750 [ 716.288525][T28000] __kmalloc_node+0x38/0x60 [ 716.293184][T28000] kvmalloc_node+0x61/0xf0 [ 716.297635][T28000] alloc_netdev_mqs+0x97/0xde0 [ 716.302547][T28000] ? macsec_validate_attr+0x7d0/0x7d0 [ 716.307950][T28000] rtnl_create_link+0x219/0xac0 [ 716.312836][T28000] __rtnl_newlink+0xe2e/0x1590 [ 716.317625][T28000] ? rtnl_link_unregister+0x240/0x240 [ 716.323097][T28000] ? is_bpf_text_address+0xcb/0x160 [ 716.328363][T28000] ? kernel_text_address+0x6e/0xe0 [ 716.333492][T28000] ? __kernel_text_address+0x9/0x30 [ 716.338796][T28000] ? unwind_get_return_address+0x5a/0xa0 [ 716.344461][T28000] ? profile_setup.cold+0xc1/0xc1 [ 716.349556][T28000] ? arch_stack_walk+0x97/0xf0 [ 716.354355][T28000] ? stack_trace_save+0x8c/0xc0 [ 716.359224][T28000] ? stack_trace_consume_entry+0x160/0x160 [ 716.365143][T28000] ? rtnl_newlink+0x46/0xa0 20:35:25 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, 0x0, 0x0, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) [ 716.369953][T28000] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 716.375525][T28000] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 716.381548][T28000] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 716.387412][T28000] rtnl_newlink+0x64/0xa0 [ 716.391759][T28000] ? __rtnl_newlink+0x1590/0x1590 [ 716.396808][T28000] rtnetlink_rcv_msg+0x44e/0xad0 [ 716.401880][T28000] ? rtnl_bridge_getlink+0x870/0x870 [ 716.407182][T28000] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 716.412476][T28000] ? __copy_skb_header+0x270/0x5b0 [ 716.417672][T28000] ? skb_splice_bits+0x1a0/0x1a0 [ 716.422605][T28000] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 716.428583][T28000] ? kmem_cache_alloc+0x261/0x740 [ 716.433599][T28000] netlink_rcv_skb+0x15a/0x410 [ 716.438438][T28000] ? rtnl_bridge_getlink+0x870/0x870 [ 716.443945][T28000] ? netlink_ack+0xa10/0xa10 [ 716.448637][T28000] netlink_unicast+0x537/0x740 [ 716.453403][T28000] ? netlink_attachskb+0x810/0x810 [ 716.458526][T28000] ? _copy_from_iter_full+0x25c/0x870 [ 716.463885][T28000] ? __phys_addr_symbol+0x2c/0x70 [ 716.468896][T28000] ? __check_object_size+0x171/0x437 [ 716.474264][T28000] netlink_sendmsg+0x882/0xe10 [ 716.479015][T28000] ? aa_af_perm+0x260/0x260 [ 716.483527][T28000] ? netlink_unicast+0x740/0x740 [ 716.488462][T28000] ? netlink_unicast+0x740/0x740 [ 716.493382][T28000] sock_sendmsg+0xcf/0x120 [ 716.497801][T28000] ____sys_sendmsg+0x6bf/0x7e0 [ 716.502569][T28000] ? kernel_sendmsg+0x50/0x50 [ 716.507493][T28000] ? _parse_integer+0x180/0x180 [ 716.512335][T28000] ___sys_sendmsg+0x100/0x170 [ 716.517003][T28000] ? sendmsg_copy_msghdr+0x70/0x70 [ 716.522113][T28000] ? __fget_files+0x32f/0x500 [ 716.526781][T28000] ? ksys_dup3+0x3c0/0x3c0 [ 716.531423][T28000] ? __fget_light+0x20e/0x270 [ 716.536212][T28000] __sys_sendmsg+0xec/0x1b0 [ 716.540712][T28000] ? __sys_sendmsg_sock+0xb0/0xb0 [ 716.545724][T28000] ? vfs_write+0x161/0x5d0 [ 716.550164][T28000] ? trace_hardirqs_off_caller+0x55/0x230 [ 716.555874][T28000] ? do_syscall_64+0x21/0x7d0 [ 716.560561][T28000] do_syscall_64+0xf6/0x7d0 [ 716.565107][T28000] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 716.571076][T28000] RIP: 0033:0x45ca29 [ 716.574966][T28000] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 716.594700][T28000] RSP: 002b:00007f668cc42c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 716.603101][T28000] RAX: ffffffffffffffda RBX: 0000000000500f40 RCX: 000000000045ca29 [ 716.611070][T28000] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 716.619377][T28000] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 716.627417][T28000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 716.635388][T28000] R13: 0000000000000a04 R14: 00000000004ccdcc R15: 00007f668cc436d4 20:35:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:25 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="d3abc7990d535c9e70bc111cb19fc0adedd1acc2004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 20:35:25 executing program 3 (fault-call:2 fault-nth:5): setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:35:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:25 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x8000000000004) ioctl$IMCTRLREQ(r2, 0x80044945, &(0x7f0000000000)={0x40, 0x3, 0xdf71}) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) [ 716.795657][T28017] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 20:35:25 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, 0x0, 0x0, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) [ 716.842460][T28024] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 20:35:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x8000000000004) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f00000002c0)={'veth1_to_team\x00', {0x2, 0x4e24, @loopback}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x9, 0x4, 0x1ff0000, 0x0, 0x8, 0x5, 0x63f, 0x0}, &(0x7f00000000c0)=0x20) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000280)={r5, 0xfffd, 0x9}, 0x8) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="505ad2060003a1f9080b33a55800f7d57d6ed2710000", @ANYRES16=r6, @ANYRESDEC], 0x58}, 0x1, 0x0, 0x0, 0x24048002}, 0x8001) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) [ 716.914192][T28029] FAULT_INJECTION: forcing a failure. [ 716.914192][T28029] name failslab, interval 1, probability 0, space 0, times 0 [ 716.938209][T28029] CPU: 0 PID: 28029 Comm: syz-executor.3 Not tainted 5.7.0-rc5-syzkaller #0 [ 716.946917][T28029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 716.957079][T28029] Call Trace: [ 716.960381][T28029] dump_stack+0x188/0x20d [ 716.964901][T28029] should_fail.cold+0x5/0xa [ 716.969416][T28029] ? find_held_lock+0x2d/0x110 [ 716.974176][T28029] ? fault_create_debugfs_attr+0x140/0x140 [ 716.979974][T28029] ? pcpu_alloc+0xfed/0x13b0 [ 716.984561][T28029] should_failslab+0x5/0xf [ 716.988979][T28029] kmem_cache_alloc_trace+0x47/0x7d0 [ 716.994289][T28029] ? pcpu_alloc+0x42c/0x13b0 [ 716.998873][T28029] __hw_addr_create_ex+0x5b/0x310 [ 717.003884][T28029] __hw_addr_add_ex+0x1ed/0x2b0 [ 717.008722][T28029] dev_addr_init+0x10b/0x1f0 [ 717.013310][T28029] ? dev_mc_flush+0x30/0x30 [ 717.017821][T28029] alloc_netdev_mqs+0x13d/0xde0 [ 717.022667][T28029] ? macsec_validate_attr+0x7d0/0x7d0 [ 717.028264][T28029] rtnl_create_link+0x219/0xac0 [ 717.033115][T28029] __rtnl_newlink+0xe2e/0x1590 [ 717.037873][T28029] ? rtnl_link_unregister+0x240/0x240 [ 717.043236][T28029] ? is_bpf_text_address+0xcb/0x160 [ 717.048442][T28029] ? kernel_text_address+0x6e/0xe0 [ 717.053551][T28029] ? __kernel_text_address+0x9/0x30 [ 717.058733][T28029] ? unwind_get_return_address+0x5a/0xa0 [ 717.064371][T28029] ? profile_setup.cold+0xc1/0xc1 [ 717.070091][T28029] ? arch_stack_walk+0x97/0xf0 [ 717.074973][T28029] ? stack_trace_save+0x8c/0xc0 [ 717.079837][T28029] ? stack_trace_consume_entry+0x160/0x160 [ 717.086035][T28029] ? rtnl_newlink+0x46/0xa0 [ 717.090553][T28029] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 717.096099][T28029] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 717.102064][T28029] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 717.107863][T28029] rtnl_newlink+0x64/0xa0 [ 717.112178][T28029] ? __rtnl_newlink+0x1590/0x1590 [ 717.117321][T28029] rtnetlink_rcv_msg+0x44e/0xad0 [ 717.122263][T28029] ? rtnl_bridge_getlink+0x870/0x870 [ 717.127567][T28029] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 717.133011][T28029] ? __copy_skb_header+0x270/0x5b0 [ 717.138144][T28029] ? skb_splice_bits+0x1a0/0x1a0 [ 717.143071][T28029] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 717.148893][T28029] ? kmem_cache_alloc+0x261/0x740 [ 717.153923][T28029] netlink_rcv_skb+0x15a/0x410 [ 717.158676][T28029] ? rtnl_bridge_getlink+0x870/0x870 [ 717.163946][T28029] ? netlink_ack+0xa10/0xa10 [ 717.168555][T28029] netlink_unicast+0x537/0x740 [ 717.173393][T28029] ? netlink_attachskb+0x810/0x810 [ 717.178487][T28029] ? _copy_from_iter_full+0x25c/0x870 [ 717.184026][T28029] ? __phys_addr_symbol+0x2c/0x70 [ 717.189044][T28029] ? __check_object_size+0x171/0x437 [ 717.194326][T28029] netlink_sendmsg+0x882/0xe10 [ 717.199253][T28029] ? aa_af_perm+0x260/0x260 [ 717.203739][T28029] ? netlink_unicast+0x740/0x740 [ 717.208666][T28029] ? netlink_unicast+0x740/0x740 [ 717.213601][T28029] sock_sendmsg+0xcf/0x120 [ 717.218103][T28029] ____sys_sendmsg+0x6bf/0x7e0 [ 717.222940][T28029] ? kernel_sendmsg+0x50/0x50 [ 717.227625][T28029] ? _parse_integer+0x180/0x180 [ 717.232642][T28029] ___sys_sendmsg+0x100/0x170 [ 717.237311][T28029] ? sendmsg_copy_msghdr+0x70/0x70 [ 717.242440][T28029] ? __fget_files+0x32f/0x500 [ 717.247102][T28029] ? ksys_dup3+0x3c0/0x3c0 [ 717.253772][T28029] ? __fget_light+0x20e/0x270 [ 717.258447][T28029] __sys_sendmsg+0xec/0x1b0 [ 717.262932][T28029] ? __sys_sendmsg_sock+0xb0/0xb0 [ 717.268116][T28029] ? vfs_write+0x161/0x5d0 [ 717.272638][T28029] ? trace_hardirqs_off_caller+0x55/0x230 [ 717.278351][T28029] ? do_syscall_64+0x21/0x7d0 [ 717.283021][T28029] do_syscall_64+0xf6/0x7d0 [ 717.287783][T28029] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 717.293656][T28029] RIP: 0033:0x45ca29 [ 717.297558][T28029] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 717.317504][T28029] RSP: 002b:00007f668cc42c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 717.326166][T28029] RAX: ffffffffffffffda RBX: 0000000000500f40 RCX: 000000000045ca29 [ 717.334218][T28029] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 717.342174][T28029] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 717.350134][T28029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 717.358187][T28029] R13: 0000000000000a04 R14: 00000000004ccdcc R15: 00007f668cc436d4 20:35:26 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000000004) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)=0x10, 0x80000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=ANY=[@ANYBLOB="4000000010003904010000800000000000000000", @ANYRES32=r5, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="08000219dd7800ac0cdbbc6c31df79c1fb6b4eca67b136f4be83efb480fe4b0a6f9600a3fe50cb2071defd79393d91ccab307a0c248b44ec2c0c1ef6ff2f4f55d57b7c28e480b3264ba37c5b5a22ea36eb56c8c4af2d2cf2519eb60b68d59e111ab96bfd0f48ef04ba586986bf0000000000"], 0x40}}, 0x24) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in=@multicast1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f0000000240)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@private0={0xfc, 0x0, [], 0x1}, @in=@multicast2, 0x4e20, 0xffff, 0x4e23, 0x0, 0xa, 0xa0, 0xb0, 0x67, r5, r6}, {0x81, 0x8, 0x46a, 0x9, 0x33a8, 0x8bcd, 0x1f}, {0x2, 0xd8f, 0x4, 0x11e}, 0x9, 0x6e6bb6, 0x0, 0x0, 0x1, 0x2}, {{@in6=@mcast1, 0x4d3, 0x6c}, 0xa, @in=@remote, 0x3500, 0x1, 0x3, 0x1, 0x6, 0x4, 0x4}}, 0xe8) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x3, &(0x7f0000000100)={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}, 0xc) r7 = accept4$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000140)={'wg0\x00'}) ioctl$SIOCPNADDRESOURCE(r7, 0x89e0, &(0x7f0000000080)=0x2) 20:35:26 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, 0x0, 0x0, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:35:26 executing program 3 (fault-call:2 fault-nth:6): setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 717.526092][T28042] __nla_validate_parse: 9 callbacks suppressed [ 717.526103][T28042] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 717.548530][T28049] FAULT_INJECTION: forcing a failure. [ 717.548530][T28049] name failslab, interval 1, probability 0, space 0, times 0 [ 717.573330][T28049] CPU: 1 PID: 28049 Comm: syz-executor.3 Not tainted 5.7.0-rc5-syzkaller #0 [ 717.582307][T28049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 717.592460][T28049] Call Trace: [ 717.595753][T28049] dump_stack+0x188/0x20d [ 717.600089][T28049] should_fail.cold+0x5/0xa [ 717.604603][T28049] ? find_held_lock+0x2d/0x110 [ 717.609388][T28049] ? fault_create_debugfs_attr+0x140/0x140 [ 717.615280][T28049] ? pcpu_alloc+0xfed/0x13b0 [ 717.620042][T28049] ? ____sys_sendmsg+0x6bf/0x7e0 [ 717.624968][T28049] should_failslab+0x5/0xf [ 717.629372][T28049] kmem_cache_alloc_trace+0x47/0x7d0 [ 717.634639][T28049] ? pcpu_alloc+0x42c/0x13b0 [ 717.639216][T28049] __hw_addr_create_ex+0x5b/0x310 [ 717.644224][T28049] __hw_addr_add_ex+0x1ed/0x2b0 [ 717.649691][T28049] dev_addr_init+0x10b/0x1f0 [ 717.654281][T28049] ? dev_mc_flush+0x30/0x30 [ 717.658788][T28049] alloc_netdev_mqs+0x13d/0xde0 [ 717.663620][T28049] ? macsec_validate_attr+0x7d0/0x7d0 [ 717.668999][T28049] rtnl_create_link+0x219/0xac0 [ 717.673854][T28049] __rtnl_newlink+0xe2e/0x1590 [ 717.679127][T28049] ? rtnl_link_unregister+0x240/0x240 [ 717.684508][T28049] ? is_bpf_text_address+0xcb/0x160 [ 717.689690][T28049] ? kernel_text_address+0x6e/0xe0 [ 717.694789][T28049] ? __kernel_text_address+0x9/0x30 [ 717.700069][T28049] ? unwind_get_return_address+0x5a/0xa0 [ 717.706293][T28049] ? profile_setup.cold+0xc1/0xc1 [ 717.711404][T28049] ? arch_stack_walk+0x97/0xf0 [ 717.716159][T28049] ? stack_trace_save+0x8c/0xc0 [ 717.721004][T28049] ? stack_trace_consume_entry+0x160/0x160 [ 717.726862][T28049] ? rtnl_newlink+0x46/0xa0 [ 717.731607][T28049] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 717.737134][T28049] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 717.743125][T28049] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 717.749011][T28049] rtnl_newlink+0x64/0xa0 [ 717.753413][T28049] ? __rtnl_newlink+0x1590/0x1590 [ 717.758419][T28049] rtnetlink_rcv_msg+0x44e/0xad0 [ 717.763345][T28049] ? rtnl_bridge_getlink+0x870/0x870 [ 717.768629][T28049] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 717.773906][T28049] ? __copy_skb_header+0x270/0x5b0 [ 717.779002][T28049] ? skb_splice_bits+0x1a0/0x1a0 [ 717.784092][T28049] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 717.790141][T28049] ? kmem_cache_alloc+0x261/0x740 [ 717.795165][T28049] netlink_rcv_skb+0x15a/0x410 [ 717.799914][T28049] ? rtnl_bridge_getlink+0x870/0x870 [ 717.805287][T28049] ? netlink_ack+0xa10/0xa10 [ 717.810134][T28049] netlink_unicast+0x537/0x740 [ 717.815062][T28049] ? netlink_attachskb+0x810/0x810 [ 717.820162][T28049] ? _copy_from_iter_full+0x25c/0x870 [ 717.825515][T28049] ? __phys_addr_symbol+0x2c/0x70 [ 717.830521][T28049] ? __check_object_size+0x171/0x437 [ 717.835790][T28049] netlink_sendmsg+0x882/0xe10 [ 717.840543][T28049] ? aa_af_perm+0x260/0x260 [ 717.845052][T28049] ? netlink_unicast+0x740/0x740 [ 717.849979][T28049] ? netlink_unicast+0x740/0x740 [ 717.854910][T28049] sock_sendmsg+0xcf/0x120 [ 717.859336][T28049] ____sys_sendmsg+0x6bf/0x7e0 [ 717.864134][T28049] ? kernel_sendmsg+0x50/0x50 [ 717.868808][T28049] ? _parse_integer+0x180/0x180 [ 717.873650][T28049] ___sys_sendmsg+0x100/0x170 [ 717.878399][T28049] ? sendmsg_copy_msghdr+0x70/0x70 [ 717.883549][T28049] ? __fget_files+0x32f/0x500 [ 717.888432][T28049] ? ksys_dup3+0x3c0/0x3c0 [ 717.892868][T28049] ? __fget_light+0x20e/0x270 [ 717.897540][T28049] __sys_sendmsg+0xec/0x1b0 [ 717.902029][T28049] ? __sys_sendmsg_sock+0xb0/0xb0 [ 717.907038][T28049] ? vfs_write+0x161/0x5d0 [ 717.911446][T28049] ? trace_hardirqs_off_caller+0x55/0x230 [ 717.917500][T28049] ? do_syscall_64+0x21/0x7d0 [ 717.922174][T28049] do_syscall_64+0xf6/0x7d0 [ 717.927050][T28049] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 717.932949][T28049] RIP: 0033:0x45ca29 [ 717.936841][T28049] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 717.957076][T28049] RSP: 002b:00007f668cc42c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 717.965843][T28049] RAX: ffffffffffffffda RBX: 0000000000500f40 RCX: 000000000045ca29 [ 717.973869][T28049] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 717.981926][T28049] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 717.989913][T28049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 717.997875][T28049] R13: 0000000000000a04 R14: 00000000004ccdcc R15: 00007f668cc436d4 20:35:27 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540), 0x0, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:35:27 executing program 3 (fault-call:2 fault-nth:7): setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 718.080893][T28051] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 718.187232][T28062] FAULT_INJECTION: forcing a failure. [ 718.187232][T28062] name failslab, interval 1, probability 0, space 0, times 0 [ 718.201244][T28062] CPU: 1 PID: 28062 Comm: syz-executor.3 Not tainted 5.7.0-rc5-syzkaller #0 [ 718.209933][T28062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 718.220166][T28062] Call Trace: [ 718.223456][T28062] dump_stack+0x188/0x20d [ 718.227783][T28062] should_fail.cold+0x5/0xa [ 718.232285][T28062] ? fault_create_debugfs_attr+0x140/0x140 [ 718.238115][T28062] should_failslab+0x5/0xf [ 718.242562][T28062] kmem_cache_alloc_node_trace+0x27c/0x790 [ 718.248377][T28062] __kmalloc_node+0x38/0x60 [ 718.252958][T28062] kvmalloc_node+0x61/0xf0 [ 718.257384][T28062] alloc_netdev_mqs+0x8ae/0xde0 [ 718.262238][T28062] rtnl_create_link+0x219/0xac0 [ 718.267088][T28062] __rtnl_newlink+0xe2e/0x1590 [ 718.271973][T28062] ? rtnl_link_unregister+0x240/0x240 [ 718.277425][T28062] ? is_bpf_text_address+0xcb/0x160 [ 718.282887][T28062] ? kernel_text_address+0x6e/0xe0 [ 718.288068][T28062] ? __kernel_text_address+0x9/0x30 [ 718.293251][T28062] ? unwind_get_return_address+0x5a/0xa0 [ 718.298872][T28062] ? profile_setup.cold+0xc1/0xc1 [ 718.303900][T28062] ? arch_stack_walk+0x97/0xf0 [ 718.308668][T28062] ? stack_trace_save+0x8c/0xc0 [ 718.313506][T28062] ? stack_trace_consume_entry+0x160/0x160 [ 718.319450][T28062] ? rtnl_newlink+0x46/0xa0 [ 718.323939][T28062] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 718.329469][T28062] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 718.335447][T28062] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 718.341436][T28062] rtnl_newlink+0x64/0xa0 [ 718.345750][T28062] ? __rtnl_newlink+0x1590/0x1590 [ 718.350787][T28062] rtnetlink_rcv_msg+0x44e/0xad0 [ 718.355886][T28062] ? rtnl_bridge_getlink+0x870/0x870 [ 718.361243][T28062] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 718.366529][T28062] ? __copy_skb_header+0x270/0x5b0 [ 718.371628][T28062] ? skb_splice_bits+0x1a0/0x1a0 [ 718.376561][T28062] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 718.382368][T28062] ? kmem_cache_alloc+0x261/0x740 [ 718.387386][T28062] netlink_rcv_skb+0x15a/0x410 [ 718.392140][T28062] ? rtnl_bridge_getlink+0x870/0x870 [ 718.397407][T28062] ? netlink_ack+0xa10/0xa10 [ 718.402010][T28062] netlink_unicast+0x537/0x740 [ 718.406778][T28062] ? netlink_attachskb+0x810/0x810 [ 718.411877][T28062] ? _copy_from_iter_full+0x25c/0x870 [ 718.417257][T28062] ? __phys_addr_symbol+0x2c/0x70 [ 718.422269][T28062] ? __check_object_size+0x171/0x437 [ 718.427564][T28062] netlink_sendmsg+0x882/0xe10 [ 718.432333][T28062] ? aa_af_perm+0x260/0x260 [ 718.436924][T28062] ? netlink_unicast+0x740/0x740 [ 718.441959][T28062] ? netlink_unicast+0x740/0x740 [ 718.446883][T28062] sock_sendmsg+0xcf/0x120 [ 718.451282][T28062] ____sys_sendmsg+0x6bf/0x7e0 [ 718.456031][T28062] ? kernel_sendmsg+0x50/0x50 [ 718.460692][T28062] ? _parse_integer+0x180/0x180 [ 718.465546][T28062] ___sys_sendmsg+0x100/0x170 [ 718.470397][T28062] ? sendmsg_copy_msghdr+0x70/0x70 [ 718.475501][T28062] ? __fget_files+0x32f/0x500 [ 718.481586][T28062] ? ksys_dup3+0x3c0/0x3c0 [ 718.486008][T28062] ? __fget_light+0x20e/0x270 [ 718.490701][T28062] __sys_sendmsg+0xec/0x1b0 [ 718.495187][T28062] ? __sys_sendmsg_sock+0xb0/0xb0 [ 718.500370][T28062] ? vfs_write+0x161/0x5d0 [ 718.504780][T28062] ? trace_hardirqs_off_caller+0x55/0x230 [ 718.510498][T28062] ? do_syscall_64+0x21/0x7d0 [ 718.515161][T28062] do_syscall_64+0xf6/0x7d0 [ 718.519657][T28062] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 718.525543][T28062] RIP: 0033:0x45ca29 [ 718.529423][T28062] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 718.549007][T28062] RSP: 002b:00007f668cc42c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 718.557414][T28062] RAX: ffffffffffffffda RBX: 0000000000500f40 RCX: 000000000045ca29 [ 718.565384][T28062] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 718.573356][T28062] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 718.581407][T28062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 718.589392][T28062] R13: 0000000000000a04 R14: 00000000004ccdcc R15: 00007f668cc436d4 20:35:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:27 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r3, r2, 0x0, 0x8000000000004) r5 = socket(0xa, 0x1, 0x0) close(r5) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000000)={r7}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={r7, 0x8, 0x10}, &(0x7f0000000040)=0xc) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000007580)=[{{&(0x7f0000000180)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000240)=""/92, 0x5c}, {&(0x7f00000002c0)=""/74, 0x4a}], 0x2, &(0x7f0000000400)=""/169, 0xa9}, 0x6}, {{&(0x7f00000004c0)=@nl=@unspec, 0x80, &(0x7f0000000700)=[{&(0x7f0000000540)=""/165, 0xa5}, {&(0x7f0000000100)=""/52, 0x34}, {&(0x7f0000000600)=""/117, 0x75}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000000680)=""/117, 0x75}, {&(0x7f0000000340)=""/14, 0xe}], 0x6, &(0x7f0000000780)=""/161, 0xa1}, 0x665}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000840)=""/227, 0xe3}, {&(0x7f0000000940)=""/75, 0x4b}, {&(0x7f00000009c0)=""/201, 0xc9}, {&(0x7f0000002340)=""/4096, 0x1000}, {&(0x7f0000000ac0)=""/228, 0xe4}, {&(0x7f0000000bc0)=""/214, 0xd6}, {&(0x7f0000000cc0)=""/241, 0xf1}], 0x7, &(0x7f0000000e40)=""/200, 0xc8}, 0x1}, {{&(0x7f0000000f40)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x80, &(0x7f0000001080)=[{&(0x7f0000000fc0)=""/147, 0x93}], 0x1}}, {{&(0x7f00000010c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000004700)=[{&(0x7f0000001140)=""/133, 0x85}, {&(0x7f0000003340)=""/201, 0xc9}, {&(0x7f0000001200)=""/140, 0x8c}, {&(0x7f0000003440)=""/203, 0xcb}, {&(0x7f0000003540)}, {&(0x7f0000003580)=""/201, 0xc9}, {&(0x7f0000003680)=""/78, 0x4e}, {&(0x7f0000003700)=""/4096, 0x1000}], 0x8, &(0x7f0000004780)=""/38, 0x26}, 0x8}, {{&(0x7f00000047c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f00000049c0)=[{&(0x7f0000004840)=""/184, 0xb8}, {&(0x7f0000004900)=""/88, 0x58}, {&(0x7f0000004980)=""/26, 0x1a}], 0x3, &(0x7f0000004a00)=""/191, 0xbf}, 0x9a1}, {{&(0x7f0000004ac0)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000004cc0)=[{&(0x7f0000004b40)=""/5, 0x5}, {&(0x7f0000004b80)=""/50, 0x32}, {&(0x7f0000004bc0)=""/246, 0xf6}], 0x3, &(0x7f0000004d00)=""/4096, 0x1000}, 0xe0}, {{&(0x7f0000005d00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000005e80)=[{&(0x7f0000005d80)=""/235, 0xeb}], 0x1, &(0x7f0000005ec0)=""/34, 0x22}, 0x7}, {{&(0x7f0000005f00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000007480)=[{&(0x7f0000005f80)=""/123, 0x7b}, {&(0x7f0000006000)=""/171, 0xab}, {&(0x7f00000060c0)=""/1, 0x1}, {&(0x7f0000006100)=""/4096, 0x1000}, {&(0x7f0000007100)=""/98, 0x62}, {&(0x7f0000007180)=""/215, 0xd7}, {&(0x7f0000007280)=""/124, 0x7c}, {&(0x7f0000007300)=""/104, 0x68}, {&(0x7f0000007380)=""/211, 0xd3}], 0x9, &(0x7f0000007540)}, 0x9}], 0x9, 0x10020, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r8, 0x84, 0x17, &(0x7f00000077c0)={r7, 0x472, 0x44, "5bc285051fff273089a7cbc6de59380d417db4a348e99cd225a6512b37693f6de55e1a0ba6069282810cc579bc4e5ca80580554b00b54b934631aaed4621df9de44fc317"}, 0x4c) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) 20:35:27 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540), 0x0, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:35:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:28 executing program 3 (fault-call:2 fault-nth:8): setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:35:28 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8000000000004) r2 = socket(0x2, 0x80000, 0x2) close(r2) socket$inet(0x2, 0x80001, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000000)={r4}, 0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000280)=ANY=[@ANYRES32=r4, @ANYBLOB="0e0000f79845f169228955098ec81328d0319e756134387d9b70058fa291374788d7cbc03defa592f9e957a0871fe85b17b12db8be88c3209bc2fdffac2de75248923e923a4642e60578246861a52710eecad30a392b43edc19c0dccb236200075b89e33fa29eb5ea011b6aa3b30382e497fb4703b4468b066dc38662e496942362f877d27d0e9fa35d374c9d178ceb64606e3ee8b678a4d7c1882947d399d255368c74bd0f25717f1c86a35b1195a0bb0b3109f028ed991ded662c7f3"], &(0x7f0000000140)=0x16) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(cipher_null)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-aesni-avx2\x00'}, 0x58) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100), &(0x7f0000000540)=0x4) accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20000814) 20:35:28 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540), 0x0, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) [ 718.988023][T28089] FAULT_INJECTION: forcing a failure. [ 718.988023][T28089] name failslab, interval 1, probability 0, space 0, times 0 [ 719.016154][T28089] CPU: 1 PID: 28089 Comm: syz-executor.3 Not tainted 5.7.0-rc5-syzkaller #0 [ 719.024876][T28089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 719.035723][T28089] Call Trace: [ 719.039011][T28089] dump_stack+0x188/0x20d [ 719.043349][T28089] should_fail.cold+0x5/0xa [ 719.047842][T28089] ? fault_create_debugfs_attr+0x140/0x140 [ 719.053686][T28089] should_failslab+0x5/0xf [ 719.058098][T28089] kmem_cache_alloc_node_trace+0x27c/0x790 [ 719.063898][T28089] __kmalloc_node+0x38/0x60 [ 719.068417][T28089] kvmalloc_node+0x61/0xf0 [ 719.073004][T28089] alloc_netdev_mqs+0x8ae/0xde0 [ 719.077843][T28089] rtnl_create_link+0x219/0xac0 [ 719.082700][T28089] __rtnl_newlink+0xe2e/0x1590 [ 719.087645][T28089] ? rtnl_link_unregister+0x240/0x240 [ 719.093007][T28089] ? is_bpf_text_address+0xcb/0x160 [ 719.098190][T28089] ? kernel_text_address+0x6e/0xe0 [ 719.103281][T28089] ? __kernel_text_address+0x9/0x30 [ 719.108502][T28089] ? unwind_get_return_address+0x5a/0xa0 [ 719.114153][T28089] ? profile_setup.cold+0xc1/0xc1 [ 719.119263][T28089] ? arch_stack_walk+0x97/0xf0 [ 719.124087][T28089] ? stack_trace_save+0x8c/0xc0 [ 719.129017][T28089] ? stack_trace_consume_entry+0x160/0x160 [ 719.134849][T28089] ? rtnl_newlink+0x46/0xa0 [ 719.139337][T28089] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 719.144866][T28089] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 719.150831][T28089] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 719.156641][T28089] rtnl_newlink+0x64/0xa0 [ 719.160969][T28089] ? __rtnl_newlink+0x1590/0x1590 [ 719.165983][T28089] rtnetlink_rcv_msg+0x44e/0xad0 [ 719.170907][T28089] ? rtnl_bridge_getlink+0x870/0x870 [ 719.176177][T28089] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 719.181449][T28089] ? __copy_skb_header+0x270/0x5b0 [ 719.186541][T28089] ? skb_splice_bits+0x1a0/0x1a0 [ 719.191476][T28089] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 719.197351][T28089] ? kmem_cache_alloc+0x261/0x740 [ 719.202464][T28089] netlink_rcv_skb+0x15a/0x410 [ 719.207221][T28089] ? rtnl_bridge_getlink+0x870/0x870 [ 719.212511][T28089] ? netlink_ack+0xa10/0xa10 [ 719.217192][T28089] netlink_unicast+0x537/0x740 [ 719.222377][T28089] ? netlink_attachskb+0x810/0x810 [ 719.227469][T28089] ? _copy_from_iter_full+0x25c/0x870 [ 719.232824][T28089] ? __phys_addr_symbol+0x2c/0x70 [ 719.238004][T28089] ? __check_object_size+0x171/0x437 [ 719.243276][T28089] netlink_sendmsg+0x882/0xe10 [ 719.248028][T28089] ? aa_af_perm+0x260/0x260 [ 719.252516][T28089] ? netlink_unicast+0x740/0x740 [ 719.257441][T28089] ? netlink_unicast+0x740/0x740 [ 719.262365][T28089] sock_sendmsg+0xcf/0x120 [ 719.266767][T28089] ____sys_sendmsg+0x6bf/0x7e0 [ 719.272036][T28089] ? kernel_sendmsg+0x50/0x50 [ 719.276696][T28089] ? _parse_integer+0x180/0x180 [ 719.281686][T28089] ___sys_sendmsg+0x100/0x170 [ 719.286362][T28089] ? sendmsg_copy_msghdr+0x70/0x70 [ 719.291468][T28089] ? __fget_files+0x32f/0x500 [ 719.296133][T28089] ? ksys_dup3+0x3c0/0x3c0 [ 719.300730][T28089] ? __fget_light+0x20e/0x270 [ 719.305412][T28089] __sys_sendmsg+0xec/0x1b0 [ 719.309919][T28089] ? __sys_sendmsg_sock+0xb0/0xb0 [ 719.314953][T28089] ? vfs_write+0x161/0x5d0 [ 719.319385][T28089] ? trace_hardirqs_off_caller+0x55/0x230 [ 719.325090][T28089] ? do_syscall_64+0x21/0x7d0 [ 719.329754][T28089] do_syscall_64+0xf6/0x7d0 [ 719.335027][T28089] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 719.340903][T28089] RIP: 0033:0x45ca29 [ 719.344794][T28089] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 719.364394][T28089] RSP: 002b:00007f668cc42c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 719.372785][T28089] RAX: ffffffffffffffda RBX: 0000000000500f40 RCX: 000000000045ca29 [ 719.380751][T28089] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 719.388885][T28089] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 719.397188][T28089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 719.405146][T28089] R13: 0000000000000a04 R14: 00000000004ccdcc R15: 00007f668cc436d4 20:35:28 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:35:28 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) sendfile(r2, r1, 0x0, 0x8000000000004) recvfrom$netrom(r2, &(0x7f0000000000)=""/17, 0x11, 0x0, &(0x7f0000000040)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 20:35:28 executing program 3 (fault-call:2 fault-nth:9): setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 719.663476][T28082] validate_nla: 8 callbacks suppressed [ 719.663485][T28082] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 719.747118][T28075] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 20:35:28 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(r2, &(0x7f00000003c0)={0x2, 0x4e23, @rand_addr=0x640100fd}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) 20:35:28 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) [ 719.812415][T28122] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 719.844321][T28122] FAULT_INJECTION: forcing a failure. [ 719.844321][T28122] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 719.872508][T28122] CPU: 1 PID: 28122 Comm: syz-executor.3 Not tainted 5.7.0-rc5-syzkaller #0 [ 719.881225][T28122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 719.891271][T28122] Call Trace: [ 719.894554][T28122] dump_stack+0x188/0x20d [ 719.898889][T28122] should_fail.cold+0x5/0xa [ 719.903391][T28122] ? fault_create_debugfs_attr+0x140/0x140 [ 719.909187][T28122] __alloc_pages_nodemask+0x17a/0x810 [ 719.915581][T28122] ? mark_held_locks+0xe0/0xe0 [ 719.920340][T28122] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 719.927093][T28122] alloc_pages_current+0xff/0x200 [ 719.932106][T28122] get_zeroed_page+0x10/0x40 [ 719.936684][T28122] dev_alloc_name_ns+0x13e/0x4a0 [ 719.941628][T28122] ? lock_downgrade+0x840/0x840 [ 719.946530][T28122] ? preempt_count_add+0x74/0x140 [ 719.951540][T28122] ? dev_fill_metadata_dst+0x670/0x670 [ 719.956980][T28122] ? __is_kernel_percpu_address+0x1ad/0x210 [ 719.963837][T28122] dev_get_valid_name+0x67/0x110 [ 719.968879][T28122] register_netdevice+0x263/0x10b0 [ 719.973974][T28122] ? __kmalloc_node+0x38/0x60 [ 719.978632][T28122] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 719.984169][T28122] ? netdev_change_features+0xb0/0xb0 [ 719.989620][T28122] ? macsec_start_xmit+0x22e0/0x22e0 [ 719.995066][T28122] macsec_newlink+0x408/0x1320 [ 719.999815][T28122] ? macsec_dellink+0x230/0x230 [ 720.004721][T28122] ? xdp_rxq_info_reg+0x111/0x1b0 [ 720.009730][T28122] ? alloc_netdev_mqs+0xa1d/0xde0 [ 720.014761][T28122] ? rtnl_create_link+0x184/0xac0 [ 720.019770][T28122] ? macsec_dellink+0x230/0x230 [ 720.024616][T28122] __rtnl_newlink+0xf18/0x1590 [ 720.029370][T28122] ? rtnl_link_unregister+0x240/0x240 [ 720.034730][T28122] ? is_bpf_text_address+0xcb/0x160 [ 720.039910][T28122] ? kernel_text_address+0x6e/0xe0 [ 720.045018][T28122] ? __kernel_text_address+0x9/0x30 [ 720.050203][T28122] ? unwind_get_return_address+0x5a/0xa0 [ 720.055899][T28122] ? profile_setup.cold+0xc1/0xc1 [ 720.060903][T28122] ? arch_stack_walk+0x97/0xf0 [ 720.065673][T28122] ? stack_trace_save+0x8c/0xc0 [ 720.071129][T28122] ? stack_trace_consume_entry+0x160/0x160 [ 720.077318][T28122] ? rtnl_newlink+0x46/0xa0 [ 720.081813][T28122] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 720.087340][T28122] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 720.093302][T28122] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 720.099189][T28122] rtnl_newlink+0x64/0xa0 [ 720.103501][T28122] ? __rtnl_newlink+0x1590/0x1590 [ 720.108539][T28122] rtnetlink_rcv_msg+0x44e/0xad0 [ 720.113506][T28122] ? rtnl_bridge_getlink+0x870/0x870 [ 720.118798][T28122] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 720.124159][T28122] ? __copy_skb_header+0x270/0x5b0 [ 720.129435][T28122] ? skb_splice_bits+0x1a0/0x1a0 [ 720.134353][T28122] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 720.140139][T28122] ? kmem_cache_alloc+0x261/0x740 [ 720.145166][T28122] netlink_rcv_skb+0x15a/0x410 [ 720.149921][T28122] ? rtnl_bridge_getlink+0x870/0x870 [ 720.155208][T28122] ? netlink_ack+0xa10/0xa10 [ 720.159799][T28122] netlink_unicast+0x537/0x740 [ 720.164555][T28122] ? netlink_attachskb+0x810/0x810 [ 720.169649][T28122] ? _copy_from_iter_full+0x25c/0x870 [ 720.175008][T28122] ? __phys_addr_symbol+0x2c/0x70 [ 720.180017][T28122] ? __check_object_size+0x171/0x437 [ 720.185296][T28122] netlink_sendmsg+0x882/0xe10 [ 720.190049][T28122] ? aa_af_perm+0x260/0x260 [ 720.194619][T28122] ? netlink_unicast+0x740/0x740 [ 720.199547][T28122] ? netlink_unicast+0x740/0x740 [ 720.204468][T28122] sock_sendmsg+0xcf/0x120 [ 720.210108][T28122] ____sys_sendmsg+0x6bf/0x7e0 [ 720.214858][T28122] ? kernel_sendmsg+0x50/0x50 [ 720.219546][T28122] ? _parse_integer+0x180/0x180 [ 720.224470][T28122] ___sys_sendmsg+0x100/0x170 [ 720.229134][T28122] ? sendmsg_copy_msghdr+0x70/0x70 [ 720.234252][T28122] ? __fget_files+0x32f/0x500 [ 720.238913][T28122] ? ksys_dup3+0x3c0/0x3c0 [ 720.243322][T28122] ? __fget_light+0x20e/0x270 [ 720.247983][T28122] __sys_sendmsg+0xec/0x1b0 [ 720.252467][T28122] ? __sys_sendmsg_sock+0xb0/0xb0 [ 720.257578][T28122] ? vfs_write+0x161/0x5d0 [ 720.262000][T28122] ? trace_hardirqs_off_caller+0x55/0x230 [ 720.267902][T28122] ? do_syscall_64+0x21/0x7d0 [ 720.272566][T28122] do_syscall_64+0xf6/0x7d0 [ 720.277062][T28122] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 720.282948][T28122] RIP: 0033:0x45ca29 [ 720.286913][T28122] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 720.306592][T28122] RSP: 002b:00007f668cc42c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 720.315098][T28122] RAX: ffffffffffffffda RBX: 0000000000500f40 RCX: 000000000045ca29 [ 720.323089][T28122] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 720.331045][T28122] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 720.339344][T28122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 720.347320][T28122] R13: 0000000000000a04 R14: 00000000004ccdcc R15: 00007f668cc436d4 20:35:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:29 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) 20:35:29 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:35:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:29 executing program 3 (fault-call:2 fault-nth:10): setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:35:29 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r1, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2c01810}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x300, 0x70bd25, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004850}, 0xc0c4) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) [ 720.708228][T28141] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 720.740580][T28142] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 720.752623][T28142] FAULT_INJECTION: forcing a failure. [ 720.752623][T28142] name failslab, interval 1, probability 0, space 0, times 0 20:35:29 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x9) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000040)={{0x3a, @private=0xa010102, 0x4e21, 0x4, 'lblc\x00', 0x8, 0x5, 0x6f}, {@broadcast, 0x4e23, 0x2000, 0x7, 0x9, 0xeb9}}, 0x44) 20:35:29 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@rc={0x1f, @none, 0x80}, 0x80, &(0x7f0000000080), 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/496, @ANYRES64=r0], 0x1e8}, 0x10) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20001041}, 0x801) shutdown(r0, 0x1) [ 720.804378][T28142] CPU: 1 PID: 28142 Comm: syz-executor.3 Not tainted 5.7.0-rc5-syzkaller #0 [ 720.813279][T28142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 720.823345][T28142] Call Trace: [ 720.826655][T28142] dump_stack+0x188/0x20d [ 720.831008][T28142] should_fail.cold+0x5/0xa [ 720.835536][T28142] ? fault_create_debugfs_attr+0x140/0x140 [ 720.841844][T28142] should_failslab+0x5/0xf [ 720.846278][T28142] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 720.851683][T28142] netdev_name_node_alloc+0x44/0x120 [ 720.856987][T28142] register_netdevice+0x288/0x10b0 [ 720.862114][T28142] ? __kmalloc_node+0x38/0x60 [ 720.866804][T28142] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 720.872369][T28142] ? netdev_change_features+0xb0/0xb0 [ 720.877999][T28142] ? macsec_start_xmit+0x22e0/0x22e0 [ 720.883311][T28142] macsec_newlink+0x408/0x1320 [ 720.886563][T28158] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20001 [ 720.888105][T28142] ? macsec_dellink+0x230/0x230 [ 720.888124][T28142] ? xdp_rxq_info_reg+0x111/0x1b0 20:35:30 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)={0xb8, r1, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0x9c, 0xac, "588225254da02db39ac92e9481bdd0ee0e35513364db2f0c652c293c7dcb24fdaca686b81b4db9097873e316b63bda7792760ac496cd0b780e080f18d4e3b1a1c8bf88dab162e426a0aca4abd0b76bb1a6962398761b377f066991110a3d8acd820bc94ea27c2fa605f64080bcfdce791aef7f5f72b72c906eb0660dfbbc2e17255c5de95612abb68e6d2121366b2110aed67b67dd124671"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}]}, 0xb8}, 0x1, 0x0, 0x0, 0x5}, 0x24000000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x10) r3 = socket$netlink(0x10, 0x3, 0xc8616e231147bac3) getsockopt$netlink(r3, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) r4 = accept(r3, 0x0, &(0x7f0000000300)) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="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"], 0x3}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, r5, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x100000001}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x9}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x0) [ 720.888144][T28142] ? alloc_netdev_mqs+0xa1d/0xde0 [ 720.888166][T28142] ? rtnl_create_link+0x184/0xac0 [ 720.914726][T28142] ? macsec_dellink+0x230/0x230 [ 720.919589][T28142] __rtnl_newlink+0xf18/0x1590 [ 720.924381][T28142] ? rtnl_link_unregister+0x240/0x240 [ 720.929804][T28142] ? is_bpf_text_address+0xcb/0x160 [ 720.935028][T28142] ? kernel_text_address+0x6e/0xe0 [ 720.940154][T28142] ? __kernel_text_address+0x9/0x30 [ 720.945368][T28142] ? unwind_get_return_address+0x5a/0xa0 20:35:30 executing program 5: sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000010a01040000020000000000470000030c000440000000000000000330ea0d3b014b1fc33c756813c9f778"], 0x20}, 0x1, 0x0, 0x0, 0x20000801}, 0x4c081) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) [ 720.951017][T28142] ? profile_setup.cold+0xc1/0xc1 [ 720.956071][T28142] ? arch_stack_walk+0x97/0xf0 [ 720.960867][T28142] ? stack_trace_save+0x8c/0xc0 [ 720.965913][T28142] ? stack_trace_consume_entry+0x160/0x160 [ 720.972838][T28142] ? rtnl_newlink+0x46/0xa0 [ 720.977383][T28142] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 720.982938][T28142] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 720.988925][T28142] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 720.994752][T28142] rtnl_newlink+0x64/0xa0 [ 720.999265][T28142] ? __rtnl_newlink+0x1590/0x1590 20:35:30 executing program 0: ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000000)={{0x2, 0x4e22, @broadcast}, {0x306, @remote}, 0x18, {0x2, 0x4e22, @rand_addr=0x64010102}, 'bond_slave_1\x00'}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) [ 721.005087][T28142] rtnetlink_rcv_msg+0x44e/0xad0 [ 721.010044][T28142] ? rtnl_bridge_getlink+0x870/0x870 [ 721.015363][T28142] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 721.020660][T28142] ? __copy_skb_header+0x270/0x5b0 [ 721.025781][T28142] ? skb_splice_bits+0x1a0/0x1a0 [ 721.030723][T28142] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 721.036545][T28142] ? kmem_cache_alloc+0x261/0x740 [ 721.041597][T28142] netlink_rcv_skb+0x15a/0x410 [ 721.046377][T28142] ? rtnl_bridge_getlink+0x870/0x870 20:35:30 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) setsockopt$inet6_int(r3, 0x29, 0x50, &(0x7f0000000080)=0x4, 0x4) write$binfmt_elf64(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"/1944], 0x798) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendfile(0xffffffffffffffff, r6, 0x0, 0xf03b0000) sendfile(0xffffffffffffffff, r5, 0x0, 0x8000000000004) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 721.051681][T28142] ? netlink_ack+0xa10/0xa10 [ 721.056314][T28142] netlink_unicast+0x537/0x740 [ 721.061103][T28142] ? netlink_attachskb+0x810/0x810 [ 721.066225][T28142] ? _copy_from_iter_full+0x25c/0x870 [ 721.071606][T28142] ? __phys_addr_symbol+0x2c/0x70 [ 721.076642][T28142] ? __check_object_size+0x171/0x437 [ 721.081936][T28142] netlink_sendmsg+0x882/0xe10 [ 721.086719][T28142] ? aa_af_perm+0x260/0x260 [ 721.091239][T28142] ? netlink_unicast+0x740/0x740 [ 721.096289][T28142] ? netlink_unicast+0x740/0x740 [ 721.101244][T28142] sock_sendmsg+0xcf/0x120 [ 721.105682][T28142] ____sys_sendmsg+0x6bf/0x7e0 [ 721.110473][T28142] ? kernel_sendmsg+0x50/0x50 [ 721.115174][T28142] ? _parse_integer+0x180/0x180 [ 721.120049][T28142] ___sys_sendmsg+0x100/0x170 [ 721.124742][T28142] ? sendmsg_copy_msghdr+0x70/0x70 [ 721.129880][T28142] ? __fget_files+0x32f/0x500 [ 721.134585][T28142] ? ksys_dup3+0x3c0/0x3c0 [ 721.139021][T28142] ? __fget_light+0x20e/0x270 [ 721.143731][T28142] __sys_sendmsg+0xec/0x1b0 [ 721.148250][T28142] ? __sys_sendmsg_sock+0xb0/0xb0 [ 721.153287][T28142] ? vfs_write+0x161/0x5d0 [ 721.157741][T28142] ? trace_hardirqs_off_caller+0x55/0x230 [ 721.163496][T28142] ? do_syscall_64+0x21/0x7d0 [ 721.168172][T28142] do_syscall_64+0xf6/0x7d0 [ 721.173367][T28142] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 721.179343][T28142] RIP: 0033:0x45ca29 [ 721.183226][T28142] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 721.202913][T28142] RSP: 002b:00007f668cc42c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 721.211323][T28142] RAX: ffffffffffffffda RBX: 0000000000500f40 RCX: 000000000045ca29 [ 721.219296][T28142] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 721.227535][T28142] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 721.235595][T28142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 721.243755][T28142] R13: 0000000000000a04 R14: 00000000004ccdcc R15: 00007f668cc436d4 [ 721.449110][T28147] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 721.539584][T28181] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 20:35:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x5, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:30 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0xa, 0x1, 0x0) close(r1) r2 = socket$inet(0x2, 0x800, 0x20) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000000)={r3}, 0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={r3, 0x200}, &(0x7f0000000040)=0x8) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r4, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r4, 0x0, r0, 0x0, 0x7fffffff, 0x0) 20:35:30 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:35:30 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x154, 0xa, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x74, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @remote}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0xe9}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xffffffff}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x1}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x38, 0x8, 0x0, 0x1, [{0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'bond_slave_0\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8}}]}, @IPSET_ATTR_ADT={0x60, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00'}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x2}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x10000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xfff}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'rose0\x00'}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfffffffe}]}, 0x154}, 0x1, 0x0, 0x0, 0x20000008}, 0x8840) 20:35:30 executing program 3 (fault-call:2 fault-nth:11): setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:35:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x5, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) [ 721.843459][T28192] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 721.872149][T28192] FAULT_INJECTION: forcing a failure. [ 721.872149][T28192] name failslab, interval 1, probability 0, space 0, times 0 20:35:31 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendfile(r1, r3, 0x0, 0x8000000000002) r4 = accept4$bt_l2cap(r1, &(0x7f0000000000), &(0x7f0000000080)=0xe, 0x800) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8982, &(0x7f00000000c0)={0x6, '\x00', {0x1f}, 0x3}) accept4(r0, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r1, 0x10e, 0x1, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x400c010}, 0x8c) [ 721.897788][T28192] CPU: 1 PID: 28192 Comm: syz-executor.3 Not tainted 5.7.0-rc5-syzkaller #0 [ 721.906534][T28192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 721.916774][T28192] Call Trace: [ 721.920096][T28192] dump_stack+0x188/0x20d [ 721.924446][T28192] should_fail.cold+0x5/0xa [ 721.929060][T28192] ? fault_create_debugfs_attr+0x140/0x140 [ 721.934892][T28192] should_failslab+0x5/0xf [ 721.939326][T28192] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 721.944745][T28192] ? kstrdup+0x56/0x70 [ 721.949353][T28192] ? kfree+0x285/0x2b0 [ 721.953610][T28192] device_add+0xe3a/0x1c10 [ 721.958046][T28192] ? device_initialize+0x5d0/0x5d0 [ 721.963278][T28192] ? uevent_show+0x360/0x360 [ 721.967973][T28192] ? __raw_spin_lock_init+0x34/0x100 [ 721.973554][T28192] ? __init_waitqueue_head+0x97/0x110 [ 721.979225][T28192] ? pm_runtime_init+0x2cf/0x3b0 [ 721.984453][T28192] netdev_register_kobject+0x180/0x3b0 [ 721.990224][T28192] register_netdevice+0xa80/0x10b0 20:35:31 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") ioctl$sock_ifreq(r2, 0x0, &(0x7f0000000040)={'geneve1\x00', @ifru_data=&(0x7f0000000000)="c8946e21219edd2164128eabfe3c1e3d1354c203a284937223d6707c20771b56"}) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000300)="38475f9d8820bdfd63da5a8db5993fb1289f12048bff64618d554157146aefa37f06053d759b36b75c027b78afde66ca390acb4b3a2e65682353118c9e3ce2238919832520af356cdb20d2bf33d799781eddd0c1cbaa2f697361cda55cab47dc1b3ed7277ba26db1ee8e0cda8b", 0x6d}, {&(0x7f0000000400)="8b9501db2ff9a06cbc2376d81c3fc0dd1a856d266bab030322d0ab07cfb892bc5e0332909b064ccc08894c4f465edfffecefbf8872164508779e14da930873ef71445724b07f87a04020b696eed1b7002f6eaa18ee7a939f95771cf921ac5055", 0x60}, {&(0x7f0000000480)="11ac1879c6384a1803f4a25a4f21f9f5b56c8b72effc0d2c3b6a50f943577bac38166a717a74528fecdc0021c6fa2c682281630af62e26aa5ef3c08b3f69a5231c5d43e0a8df81fa72420d81ea59cc5dd47f61ae630899713d88521637fc6ce4ba2258807dc517114d1ed190f4758063cd0ced5711ac50569222536a512bde19c727964a1cc9dcbdcddb278dd84b40046cb833affdca142676c86866958db9f5d6bb248d7bb22177d983127ac57b279186b01df0c920753d6a40a97d7e62a0218ce5daf89b6d8004f141dbb44587131b7ec63aa20a4121134ccf0a", 0xdb}], 0x3) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e22, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000580)="823788e9865114d07aecbc2245eb827a7754e5b6477e971a2536993faa03ff70827f28a46879011af4205bc8343278b0dc6472360f31359bf5c69a2e0dfe6b345ea68750f0da9b8144d4d008c5632cbe0363391c78292b") ioctl$SIOCX25SSUBSCRIP(r4, 0x89e1, &(0x7f0000000600)={'gretap0\x00', 0x3, 0x5}) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000000)={r6}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000700)=ANY=[@ANYRES32=r6, @ANYBLOB="080064000418257242771db29744c62a8abfaf47b820ae1744ec3032693398f1f8e2c1aa260810c5e87dd25fbb9abc2ec797683481e5bed07b7976cfeed3422b6eefbd5921f16164de3fe245cf8bd929af36338269a591e078b6f5818fb24d20086a1142cc18055e3b5b9edf57"], 0x6c) [ 721.995984][T28192] ? netdev_change_features+0xb0/0xb0 [ 722.001383][T28192] ? macsec_start_xmit+0x22e0/0x22e0 [ 722.006686][T28192] macsec_newlink+0x408/0x1320 [ 722.011475][T28192] ? macsec_dellink+0x230/0x230 [ 722.016341][T28192] ? xdp_rxq_info_reg+0x111/0x1b0 [ 722.021393][T28192] ? alloc_netdev_mqs+0xa1d/0xde0 [ 722.026458][T28192] ? rtnl_create_link+0x184/0xac0 [ 722.031499][T28192] ? macsec_dellink+0x230/0x230 [ 722.036400][T28192] __rtnl_newlink+0xf18/0x1590 [ 722.041190][T28192] ? rtnl_link_unregister+0x240/0x240 [ 722.046604][T28192] ? is_bpf_text_address+0xcb/0x160 [ 722.051904][T28192] ? kernel_text_address+0x6e/0xe0 [ 722.057030][T28192] ? __kernel_text_address+0x9/0x30 [ 722.062273][T28192] ? unwind_get_return_address+0x5a/0xa0 [ 722.067923][T28192] ? profile_setup.cold+0xc1/0xc1 [ 722.073680][T28192] ? arch_stack_walk+0x97/0xf0 [ 722.078707][T28192] ? stack_trace_save+0x8c/0xc0 [ 722.083583][T28192] ? stack_trace_consume_entry+0x160/0x160 [ 722.089714][T28192] ? rtnl_newlink+0x46/0xa0 [ 722.094236][T28192] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 722.099782][T28192] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 722.105769][T28192] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 722.111594][T28192] rtnl_newlink+0x64/0xa0 [ 722.116027][T28192] ? __rtnl_newlink+0x1590/0x1590 [ 722.121168][T28192] rtnetlink_rcv_msg+0x44e/0xad0 [ 722.126122][T28192] ? rtnl_bridge_getlink+0x870/0x870 [ 722.131433][T28192] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 722.136911][T28192] ? __copy_skb_header+0x270/0x5b0 [ 722.142039][T28192] ? skb_splice_bits+0x1a0/0x1a0 [ 722.147292][T28192] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 722.153276][T28192] ? kmem_cache_alloc+0x261/0x740 [ 722.158297][T28192] netlink_rcv_skb+0x15a/0x410 [ 722.163057][T28192] ? rtnl_bridge_getlink+0x870/0x870 [ 722.168529][T28192] ? netlink_ack+0xa10/0xa10 [ 722.173240][T28192] netlink_unicast+0x537/0x740 [ 722.178183][T28192] ? netlink_attachskb+0x810/0x810 [ 722.183482][T28192] ? _copy_from_iter_full+0x25c/0x870 [ 722.189050][T28192] ? __phys_addr_symbol+0x2c/0x70 [ 722.194079][T28192] ? __check_object_size+0x171/0x437 [ 722.199368][T28192] netlink_sendmsg+0x882/0xe10 [ 722.204145][T28192] ? aa_af_perm+0x260/0x260 [ 722.208641][T28192] ? netlink_unicast+0x740/0x740 [ 722.213729][T28192] ? netlink_unicast+0x740/0x740 [ 722.219282][T28192] sock_sendmsg+0xcf/0x120 [ 722.223717][T28192] ____sys_sendmsg+0x6bf/0x7e0 [ 722.228519][T28192] ? kernel_sendmsg+0x50/0x50 [ 722.233182][T28192] ? _parse_integer+0x180/0x180 [ 722.238272][T28192] ___sys_sendmsg+0x100/0x170 [ 722.242984][T28192] ? sendmsg_copy_msghdr+0x70/0x70 [ 722.248280][T28192] ? __fget_files+0x32f/0x500 [ 722.252988][T28192] ? ksys_dup3+0x3c0/0x3c0 [ 722.257492][T28192] ? __fget_light+0x20e/0x270 [ 722.262197][T28192] __sys_sendmsg+0xec/0x1b0 [ 722.266707][T28192] ? __sys_sendmsg_sock+0xb0/0xb0 [ 722.272515][T28192] ? vfs_write+0x161/0x5d0 [ 722.276947][T28192] ? trace_hardirqs_off_caller+0x55/0x230 [ 722.282900][T28192] ? do_syscall_64+0x21/0x7d0 [ 722.287925][T28192] do_syscall_64+0xf6/0x7d0 [ 722.292539][T28192] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 722.299403][T28192] RIP: 0033:0x45ca29 [ 722.303316][T28192] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 722.323427][T28192] RSP: 002b:00007f668cc42c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 722.333677][T28192] RAX: ffffffffffffffda RBX: 0000000000500f40 RCX: 000000000045ca29 [ 722.341918][T28192] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 20:35:31 executing program 3 (fault-call:2 fault-nth:12): setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 722.349996][T28192] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 722.357979][T28192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 722.365957][T28192] R13: 0000000000000a04 R14: 00000000004ccdcc R15: 00007f668cc436d4 [ 722.388808][T28195] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 722.450935][T28198] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 722.471587][T28217] FAULT_INJECTION: forcing a failure. [ 722.471587][T28217] name failslab, interval 1, probability 0, space 0, times 0 [ 722.491750][ T29] audit: type=1800 audit(1590266131.617:250): pid=28203 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="memory.events" dev="sda1" ino=15955 res=0 [ 722.522497][T28217] CPU: 0 PID: 28217 Comm: syz-executor.3 Not tainted 5.7.0-rc5-syzkaller #0 [ 722.531216][T28217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 722.541368][T28217] Call Trace: [ 722.544675][T28217] dump_stack+0x188/0x20d [ 722.549026][T28217] should_fail.cold+0x5/0xa [ 722.553533][T28217] ? fault_create_debugfs_attr+0x140/0x140 [ 722.559438][T28217] should_failslab+0x5/0xf [ 722.563864][T28217] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 722.569235][T28217] ? kstrdup+0x56/0x70 [ 722.573312][T28217] ? kfree+0x285/0x2b0 [ 722.577397][T28217] device_add+0xe3a/0x1c10 [ 722.581841][T28217] ? device_initialize+0x5d0/0x5d0 [ 722.587219][T28217] ? uevent_show+0x360/0x360 [ 722.591827][T28217] ? __raw_spin_lock_init+0x34/0x100 [ 722.597112][T28217] ? __init_waitqueue_head+0x97/0x110 [ 722.602474][T28217] ? pm_runtime_init+0x2cf/0x3b0 [ 722.607418][T28217] netdev_register_kobject+0x180/0x3b0 [ 722.612898][T28217] register_netdevice+0xa80/0x10b0 [ 722.618023][T28217] ? netdev_change_features+0xb0/0xb0 [ 722.623412][T28217] ? macsec_start_xmit+0x22e0/0x22e0 [ 722.628708][T28217] macsec_newlink+0x408/0x1320 [ 722.633496][T28217] ? macsec_dellink+0x230/0x230 [ 722.638362][T28217] ? xdp_rxq_info_reg+0x111/0x1b0 [ 722.643509][T28217] ? alloc_netdev_mqs+0xa1d/0xde0 [ 722.649180][T28217] ? rtnl_create_link+0x184/0xac0 [ 722.654249][T28217] ? macsec_dellink+0x230/0x230 [ 722.660150][T28217] __rtnl_newlink+0xf18/0x1590 [ 722.664939][T28217] ? rtnl_link_unregister+0x240/0x240 [ 722.670418][T28217] ? is_bpf_text_address+0xcb/0x160 [ 722.675693][T28217] ? kernel_text_address+0x6e/0xe0 [ 722.680830][T28217] ? __kernel_text_address+0x9/0x30 [ 722.686044][T28217] ? unwind_get_return_address+0x5a/0xa0 [ 722.691791][T28217] ? profile_setup.cold+0xc1/0xc1 [ 722.696814][T28217] ? arch_stack_walk+0x97/0xf0 [ 722.701616][T28217] ? stack_trace_save+0x8c/0xc0 [ 722.707067][T28217] ? stack_trace_consume_entry+0x160/0x160 [ 722.713336][T28217] ? rtnl_newlink+0x46/0xa0 [ 722.717823][T28217] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 722.723353][T28217] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 722.729327][T28217] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 722.735212][T28217] rtnl_newlink+0x64/0xa0 [ 722.739557][T28217] ? __rtnl_newlink+0x1590/0x1590 [ 722.744659][T28217] rtnetlink_rcv_msg+0x44e/0xad0 [ 722.749669][T28217] ? rtnl_bridge_getlink+0x870/0x870 [ 722.754953][T28217] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 722.760232][T28217] ? __copy_skb_header+0x270/0x5b0 [ 722.765322][T28217] ? skb_splice_bits+0x1a0/0x1a0 [ 722.770340][T28217] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 722.776147][T28217] ? kmem_cache_alloc+0x261/0x740 [ 722.781168][T28217] netlink_rcv_skb+0x15a/0x410 [ 722.785916][T28217] ? rtnl_bridge_getlink+0x870/0x870 [ 722.791186][T28217] ? netlink_ack+0xa10/0xa10 [ 722.795769][T28217] netlink_unicast+0x537/0x740 [ 722.800523][T28217] ? netlink_attachskb+0x810/0x810 [ 722.805965][T28217] ? _copy_from_iter_full+0x25c/0x870 [ 722.811342][T28217] ? __phys_addr_symbol+0x2c/0x70 [ 722.816357][T28217] ? __check_object_size+0x171/0x437 [ 722.821642][T28217] netlink_sendmsg+0x882/0xe10 [ 722.826399][T28217] ? aa_af_perm+0x260/0x260 [ 722.831066][T28217] ? netlink_unicast+0x740/0x740 [ 722.836460][T28217] ? netlink_unicast+0x740/0x740 [ 722.841390][T28217] sock_sendmsg+0xcf/0x120 [ 722.845803][T28217] ____sys_sendmsg+0x6bf/0x7e0 [ 722.850553][T28217] ? kernel_sendmsg+0x50/0x50 [ 722.855211][T28217] ? _parse_integer+0x180/0x180 [ 722.860052][T28217] ___sys_sendmsg+0x100/0x170 [ 722.864733][T28217] ? sendmsg_copy_msghdr+0x70/0x70 [ 722.870014][T28217] ? __fget_files+0x32f/0x500 [ 722.874867][T28217] ? ksys_dup3+0x3c0/0x3c0 [ 722.879294][T28217] ? __fget_light+0x20e/0x270 [ 722.883972][T28217] __sys_sendmsg+0xec/0x1b0 [ 722.888457][T28217] ? __sys_sendmsg_sock+0xb0/0xb0 [ 722.893514][T28217] ? vfs_write+0x161/0x5d0 [ 722.897953][T28217] ? trace_hardirqs_off_caller+0x55/0x230 [ 722.903665][T28217] ? do_syscall_64+0x21/0x7d0 [ 722.908381][T28217] do_syscall_64+0xf6/0x7d0 [ 722.913155][T28217] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 722.919035][T28217] RIP: 0033:0x45ca29 [ 722.923022][T28217] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 722.942896][T28217] RSP: 002b:00007f668cc42c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 20:35:31 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) [ 722.951308][T28217] RAX: ffffffffffffffda RBX: 0000000000500f40 RCX: 000000000045ca29 [ 722.959374][T28217] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 722.967486][T28217] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 722.975747][T28217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 722.983696][T28217] R13: 0000000000000a04 R14: 00000000004ccdcc R15: 00007f668cc436d4 20:35:32 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) sendfile(r2, r1, 0x0, 0x8000000000004) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e23, 0x6, @empty, 0xfff}, {0xa, 0x4e20, 0x0, @mcast2, 0x6}, 0x9, [0x3, 0x1f, 0xffffffff, 0x2, 0x6, 0x3, 0x3, 0x1]}, 0x5c) accept4(r0, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r4, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x80) 20:35:32 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r2, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) splice(r0, &(0x7f0000000000)=0x8, r2, &(0x7f0000000040)=0x3, 0x7, 0x8) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) 20:35:32 executing program 3 (fault-call:2 fault-nth:13): setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:35:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x6, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x6, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) [ 723.195121][T28240] FAULT_INJECTION: forcing a failure. [ 723.195121][T28240] name failslab, interval 1, probability 0, space 0, times 0 [ 723.215965][T28240] CPU: 1 PID: 28240 Comm: syz-executor.3 Not tainted 5.7.0-rc5-syzkaller #0 [ 723.224775][T28240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 723.235181][T28240] Call Trace: [ 723.238513][T28240] dump_stack+0x188/0x20d [ 723.242867][T28240] should_fail.cold+0x5/0xa [ 723.247388][T28240] ? fault_create_debugfs_attr+0x140/0x140 [ 723.253224][T28240] should_failslab+0x5/0xf [ 723.257904][T28240] __kmalloc_track_caller+0x2d1/0x7a0 [ 723.263439][T28240] ? kstrdup_const+0x53/0x80 [ 723.268132][T28240] ? print_usage_bug+0x240/0x240 [ 723.273205][T28240] ? __lock_acquire+0x2184/0x4c50 [ 723.278330][T28240] kstrdup+0x36/0x70 [ 723.282340][T28240] kstrdup_const+0x53/0x80 [ 723.286860][T28240] __kernfs_new_node+0x9d/0x690 [ 723.291793][T28240] ? kernfs_dop_revalidate+0x3b0/0x3b0 [ 723.297291][T28240] ? map_id_range_down+0x1c4/0x340 [ 723.302404][T28240] ? __put_user_ns+0x60/0x60 [ 723.306991][T28240] kernfs_new_node+0x93/0x120 [ 723.311667][T28240] kernfs_create_dir_ns+0x48/0x150 [ 723.317304][T28240] sysfs_create_dir_ns+0x127/0x290 [ 723.323043][T28240] ? sysfs_create_mount_point+0xb0/0xb0 [ 723.328597][T28240] ? rwlock_bug.part.0+0x90/0x90 [ 723.333546][T28240] ? net_namespace+0x9/0x40 [ 723.338144][T28240] ? device_namespace+0x8b/0xc0 [ 723.343362][T28240] kobject_add_internal+0x2ca/0x990 [ 723.348686][T28240] kobject_add+0x150/0x1c0 [ 723.353295][T28240] ? kset_create_and_add+0x190/0x190 [ 723.358725][T28240] device_add+0x38e/0x1c10 [ 723.363381][T28240] ? uevent_show+0x360/0x360 [ 723.367970][T28240] ? __raw_spin_lock_init+0x34/0x100 [ 723.373884][T28240] ? __init_waitqueue_head+0x97/0x110 [ 723.379259][T28240] ? pm_runtime_init+0x2cf/0x3b0 [ 723.384194][T28240] netdev_register_kobject+0x180/0x3b0 [ 723.389671][T28240] register_netdevice+0xa80/0x10b0 [ 723.394785][T28240] ? netdev_change_features+0xb0/0xb0 [ 723.400171][T28240] ? macsec_start_xmit+0x22e0/0x22e0 [ 723.405688][T28240] macsec_newlink+0x408/0x1320 [ 723.410627][T28240] ? macsec_dellink+0x230/0x230 [ 723.415480][T28240] ? xdp_rxq_info_reg+0x111/0x1b0 [ 723.420500][T28240] ? alloc_netdev_mqs+0xa1d/0xde0 [ 723.427259][T28240] ? rtnl_create_link+0x184/0xac0 [ 723.432379][T28240] ? macsec_dellink+0x230/0x230 [ 723.437225][T28240] __rtnl_newlink+0xf18/0x1590 [ 723.441997][T28240] ? rtnl_link_unregister+0x240/0x240 [ 723.447386][T28240] ? is_bpf_text_address+0xcb/0x160 [ 723.452637][T28240] ? kernel_text_address+0x6e/0xe0 [ 723.457875][T28240] ? __kernel_text_address+0x9/0x30 [ 723.463073][T28240] ? unwind_get_return_address+0x5a/0xa0 [ 723.468818][T28240] ? profile_setup.cold+0xc1/0xc1 [ 723.473870][T28240] ? arch_stack_walk+0x97/0xf0 [ 723.478656][T28240] ? stack_trace_save+0x8c/0xc0 [ 723.483508][T28240] ? stack_trace_consume_entry+0x160/0x160 [ 723.489362][T28240] ? rtnl_newlink+0x46/0xa0 [ 723.493880][T28240] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 723.499429][T28240] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 723.505450][T28240] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 723.511308][T28240] rtnl_newlink+0x64/0xa0 [ 723.515655][T28240] ? __rtnl_newlink+0x1590/0x1590 [ 723.520795][T28240] rtnetlink_rcv_msg+0x44e/0xad0 [ 723.525840][T28240] ? rtnl_bridge_getlink+0x870/0x870 [ 723.531131][T28240] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 723.536752][T28240] ? __copy_skb_header+0x270/0x5b0 [ 723.541959][T28240] ? skb_splice_bits+0x1a0/0x1a0 [ 723.546894][T28240] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 723.552715][T28240] ? kmem_cache_alloc+0x261/0x740 [ 723.557736][T28240] netlink_rcv_skb+0x15a/0x410 [ 723.562548][T28240] ? rtnl_bridge_getlink+0x870/0x870 [ 723.567896][T28240] ? netlink_ack+0xa10/0xa10 [ 723.572487][T28240] netlink_unicast+0x537/0x740 [ 723.577330][T28240] ? netlink_attachskb+0x810/0x810 [ 723.582564][T28240] ? _copy_from_iter_full+0x25c/0x870 [ 723.587928][T28240] ? __phys_addr_symbol+0x2c/0x70 [ 723.592960][T28240] ? __check_object_size+0x171/0x437 [ 723.598357][T28240] netlink_sendmsg+0x882/0xe10 [ 723.603124][T28240] ? aa_af_perm+0x260/0x260 [ 723.607641][T28240] ? netlink_unicast+0x740/0x740 [ 723.612595][T28240] ? netlink_unicast+0x740/0x740 [ 723.617532][T28240] sock_sendmsg+0xcf/0x120 [ 723.621951][T28240] ____sys_sendmsg+0x6bf/0x7e0 [ 723.626748][T28240] ? kernel_sendmsg+0x50/0x50 [ 723.631528][T28240] ? _parse_integer+0x180/0x180 [ 723.636404][T28240] ___sys_sendmsg+0x100/0x170 [ 723.641119][T28240] ? sendmsg_copy_msghdr+0x70/0x70 [ 723.646282][T28240] ? __fget_files+0x32f/0x500 [ 723.651036][T28240] ? ksys_dup3+0x3c0/0x3c0 [ 723.655684][T28240] ? __fget_light+0x20e/0x270 [ 723.660372][T28240] __sys_sendmsg+0xec/0x1b0 [ 723.665079][T28240] ? __sys_sendmsg_sock+0xb0/0xb0 [ 723.670115][T28240] ? vfs_write+0x161/0x5d0 [ 723.674660][T28240] ? trace_hardirqs_off_caller+0x55/0x230 [ 723.680394][T28240] ? do_syscall_64+0x21/0x7d0 [ 723.685102][T28240] do_syscall_64+0xf6/0x7d0 [ 723.689620][T28240] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 723.695581][T28240] RIP: 0033:0x45ca29 [ 723.699485][T28240] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 723.719160][T28240] RSP: 002b:00007f668cc42c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 723.727567][T28240] RAX: ffffffffffffffda RBX: 0000000000500f40 RCX: 000000000045ca29 [ 723.735559][T28240] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 20:35:32 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x3, 0x4) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, [], 0xa}, 0x6}, @in6={0xa, 0x4e24, 0xfffffc01, @loopback, 0x5}], 0x38) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="73797a300c504676901b1d16"], 0xc) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) [ 723.743543][T28240] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 723.751522][T28240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 723.759605][T28240] R13: 0000000000000a04 R14: 00000000004ccdcc R15: 00007f668cc436d4 20:35:32 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) [ 723.841981][T28240] kobject_add_internal failed for macsec2 (error: -12 parent: net) 20:35:33 executing program 3 (fault-call:2 fault-nth:14): setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:35:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x0, 'rose0\x00', {0x4}, 0xe92}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) [ 723.976604][T28262] FAULT_INJECTION: forcing a failure. [ 723.976604][T28262] name failslab, interval 1, probability 0, space 0, times 0 [ 723.989792][T28262] CPU: 1 PID: 28262 Comm: syz-executor.3 Not tainted 5.7.0-rc5-syzkaller #0 [ 723.998679][T28262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 724.008740][T28262] Call Trace: [ 724.012049][T28262] dump_stack+0x188/0x20d [ 724.016383][T28262] should_fail.cold+0x5/0xa [ 724.020992][T28262] ? fault_create_debugfs_attr+0x140/0x140 [ 724.026813][T28262] ? mark_lock+0x12b/0xf10 [ 724.031251][T28262] should_failslab+0x5/0xf [ 724.035681][T28262] kmem_cache_alloc+0x44/0x740 [ 724.040454][T28262] ? save_stack+0x32/0x40 [ 724.044794][T28262] ? save_stack+0x1b/0x40 [ 724.049162][T28262] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 724.054987][T28262] radix_tree_node_alloc.constprop.0+0x1e3/0x330 [ 724.061338][T28262] idr_get_free+0x4a3/0x8e0 [ 724.065859][T28262] idr_alloc_u32+0x170/0x2d0 [ 724.070565][T28262] ? __fprop_inc_percpu_max+0x210/0x210 [ 724.076217][T28262] ? lock_acquire+0x1f2/0x8f0 [ 724.081166][T28262] ? __kernfs_new_node+0xff/0x690 [ 724.086189][T28262] ? __kernfs_new_node+0xd4/0x690 [ 724.091235][T28262] idr_alloc_cyclic+0x102/0x220 [ 724.096212][T28262] ? idr_alloc+0x130/0x130 [ 724.100616][T28262] ? rwlock_bug.part.0+0x90/0x90 [ 724.105736][T28262] ? __radix_tree_preload+0x1fe/0x280 [ 724.111112][T28262] __kernfs_new_node+0x117/0x690 [ 724.116068][T28262] ? kernfs_dop_revalidate+0x3b0/0x3b0 [ 724.121521][T28262] ? map_id_range_down+0x1c4/0x340 [ 724.126628][T28262] ? __put_user_ns+0x60/0x60 [ 724.131213][T28262] kernfs_new_node+0x93/0x120 [ 724.135874][T28262] kernfs_create_dir_ns+0x48/0x150 [ 724.140971][T28262] sysfs_create_dir_ns+0x127/0x290 [ 724.146065][T28262] ? sysfs_create_mount_point+0xb0/0xb0 [ 724.151592][T28262] ? rwlock_bug.part.0+0x90/0x90 [ 724.156532][T28262] ? net_namespace+0x9/0x40 [ 724.161038][T28262] ? device_namespace+0x8b/0xc0 [ 724.165883][T28262] kobject_add_internal+0x2ca/0x990 [ 724.171071][T28262] kobject_add+0x150/0x1c0 [ 724.175593][T28262] ? kset_create_and_add+0x190/0x190 [ 724.180876][T28262] device_add+0x38e/0x1c10 [ 724.185294][T28262] ? uevent_show+0x360/0x360 [ 724.189952][T28262] ? __raw_spin_lock_init+0x34/0x100 [ 724.195220][T28262] ? __init_waitqueue_head+0x97/0x110 [ 724.200575][T28262] ? pm_runtime_init+0x2cf/0x3b0 [ 724.208106][T28262] netdev_register_kobject+0x180/0x3b0 [ 724.213562][T28262] register_netdevice+0xa80/0x10b0 [ 724.218660][T28262] ? netdev_change_features+0xb0/0xb0 [ 724.224025][T28262] ? macsec_start_xmit+0x22e0/0x22e0 [ 724.229295][T28262] macsec_newlink+0x408/0x1320 [ 724.234136][T28262] ? macsec_dellink+0x230/0x230 [ 724.238984][T28262] ? xdp_rxq_info_reg+0x111/0x1b0 [ 724.243999][T28262] ? alloc_netdev_mqs+0xa1d/0xde0 [ 724.249030][T28262] ? rtnl_create_link+0x184/0xac0 [ 724.254148][T28262] ? macsec_dellink+0x230/0x230 [ 724.259001][T28262] __rtnl_newlink+0xf18/0x1590 [ 724.263758][T28262] ? rtnl_link_unregister+0x240/0x240 [ 724.269293][T28262] ? is_bpf_text_address+0xcb/0x160 [ 724.274473][T28262] ? kernel_text_address+0x6e/0xe0 [ 724.279575][T28262] ? __kernel_text_address+0x9/0x30 [ 724.284754][T28262] ? unwind_get_return_address+0x5a/0xa0 [ 724.290586][T28262] ? profile_setup.cold+0xc1/0xc1 [ 724.295604][T28262] ? arch_stack_walk+0x97/0xf0 [ 724.300363][T28262] ? stack_trace_save+0x8c/0xc0 [ 724.305308][T28262] ? stack_trace_consume_entry+0x160/0x160 [ 724.311137][T28262] ? rtnl_newlink+0x46/0xa0 [ 724.315797][T28262] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 724.321339][T28262] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 724.327311][T28262] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 724.333220][T28262] rtnl_newlink+0x64/0xa0 [ 724.337713][T28262] ? __rtnl_newlink+0x1590/0x1590 [ 724.342740][T28262] rtnetlink_rcv_msg+0x44e/0xad0 [ 724.347677][T28262] ? rtnl_bridge_getlink+0x870/0x870 [ 724.352969][T28262] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 724.358247][T28262] ? __copy_skb_header+0x270/0x5b0 [ 724.363340][T28262] ? skb_splice_bits+0x1a0/0x1a0 [ 724.368344][T28262] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 724.374141][T28262] ? kmem_cache_alloc+0x261/0x740 [ 724.379165][T28262] netlink_rcv_skb+0x15a/0x410 [ 724.384216][T28262] ? rtnl_bridge_getlink+0x870/0x870 [ 724.389487][T28262] ? netlink_ack+0xa10/0xa10 [ 724.394077][T28262] netlink_unicast+0x537/0x740 [ 724.398839][T28262] ? netlink_attachskb+0x810/0x810 [ 724.403937][T28262] ? _copy_from_iter_full+0x25c/0x870 [ 724.409290][T28262] ? __phys_addr_symbol+0x2c/0x70 [ 724.414306][T28262] ? __check_object_size+0x171/0x437 [ 724.419575][T28262] netlink_sendmsg+0x882/0xe10 [ 724.424338][T28262] ? aa_af_perm+0x260/0x260 [ 724.428917][T28262] ? netlink_unicast+0x740/0x740 [ 724.434024][T28262] ? netlink_unicast+0x740/0x740 [ 724.438944][T28262] sock_sendmsg+0xcf/0x120 [ 724.443346][T28262] ____sys_sendmsg+0x6bf/0x7e0 [ 724.448107][T28262] ? kernel_sendmsg+0x50/0x50 [ 724.452788][T28262] ? _parse_integer+0x180/0x180 [ 724.457630][T28262] ___sys_sendmsg+0x100/0x170 [ 724.462466][T28262] ? sendmsg_copy_msghdr+0x70/0x70 [ 724.467593][T28262] ? __fget_files+0x32f/0x500 [ 724.472268][T28262] ? ksys_dup3+0x3c0/0x3c0 [ 724.476676][T28262] ? __fget_light+0x20e/0x270 [ 724.481514][T28262] __sys_sendmsg+0xec/0x1b0 [ 724.486009][T28262] ? __sys_sendmsg_sock+0xb0/0xb0 [ 724.491023][T28262] ? vfs_write+0x161/0x5d0 [ 724.495528][T28262] ? trace_hardirqs_off_caller+0x55/0x230 [ 724.501232][T28262] ? do_syscall_64+0x21/0x7d0 [ 724.505892][T28262] do_syscall_64+0xf6/0x7d0 [ 724.510643][T28262] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 724.516519][T28262] RIP: 0033:0x45ca29 [ 724.520396][T28262] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 724.540008][T28262] RSP: 002b:00007f668cc42c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 724.548410][T28262] RAX: ffffffffffffffda RBX: 0000000000500f40 RCX: 000000000045ca29 [ 724.556550][T28262] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 724.564518][T28262] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 724.572469][T28262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 724.580425][T28262] R13: 0000000000000a04 R14: 00000000004ccdcc R15: 00007f668cc436d4 20:35:33 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="d3abc733053e2a7b7d4c97cdce1a3168990d535c9e70bc111c8eff7f000000000060488165450dfa940023e500a34c8c2f8f17c0fb9def375b1a0bc51472eb0ce97f277ff8357649a8346954d4a43241c3b8936e2b470f3d4a52156cfc928d6967ad0a478f6a120a99c3ddcce24c2459e50200000012febd0703e91ea5908825670b486df47a685f3993793462d18df8aa6609dbed022fcaf1dbaa940465b9ce38d2569ec0ba5de8b1addbd069c164a4f9b029bc6c37e3216cefeb850000000000000000164a48bb944f952ad14d87e822924a1c", 0xd4) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 20:35:33 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r1 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r1, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, 0x0) sendmsg$rds(r1, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:35:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x7, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:33 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) accept4(r0, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r1, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8091}, 0x0) 20:35:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x7, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) [ 724.799128][T28282] validate_nla: 5 callbacks suppressed [ 724.799244][T28282] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 20:35:34 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r3, 0xffffffffffffffff, 0x0, 0x8000000000004) bind$netrom(r3, &(0x7f0000000240)={{0x3, @bcast, 0x4}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0xf000) sendfile(r5, r6, 0x0, 0xf03b0000) sendfile(r5, r2, 0x0, 0x8000000000004) getsockopt$inet_udp_int(r5, 0x11, 0x65, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r7, &(0x7f0000000000), &(0x7f0000000040)=0xc) 20:35:34 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 724.862604][T28292] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 724.938053][T28300] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 20:35:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x8, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) [ 725.053537][T28308] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 725.092346][T28292] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 725.273088][T28308] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 20:35:35 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000000)={{0x0, @local, 0x4e21, 0x2, 'none\x00', 0x20, 0x1, 0x20}, {@broadcast, 0x4e24, 0x0, 0x81, 0x0, 0x49}}, 0x44) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) r4 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r4, &(0x7f00000012c0)="0c268a937f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07ea6f7c355d88fecf90b1a7511bf896bec66ba", 0x48, 0x44070, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) 20:35:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x8, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:35 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:35:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:35 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r1 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r1, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, 0x0) sendmsg$rds(r1, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:35:35 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) [ 726.861372][T28327] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 726.894398][T28330] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 20:35:36 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000000423040025bd000000000008000101000000000000000000000000100400"/48], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000001) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) [ 726.936647][T28333] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 20:35:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x54, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x54}}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r1, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x376}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008808}, 0x40000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_hci_HCI_DATA_DIR(r4, 0x0, 0x1, &(0x7f0000000080)=0x3, 0x4) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f00000001c0)=0x40, 0x4) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r6, r5, 0x0, 0x8000000000004) getsockopt$inet6_udp_int(r6, 0x11, 0x66, &(0x7f0000000040), &(0x7f0000000100)=0x4) r7 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x41}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl(r8, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r8, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000008040)=ANY=[@ANYRES32=r7], 0x7934}, 0x1, 0x0, 0x0, 0x840}, 0x0) 20:35:36 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000002c0)={&(0x7f0000000000)="27e76f14fb50a78ebfa7c13dd4e36f8d4605024931a55844cae0732e0e34f7c701592bed12f464f7a0b226d364053be3128ea05a77a67bd4914564c1cb96a3af95db09d2d44622e2204fd5c356a15d122306cde7d267f80d23645804f57b3a1296f6b08a4bf6689379b5810fa74f6501d9126fbaa731d7bb9d6580cce9f3c59255f3622f50ded41fdf216470950106aa5fbf952de7d58f90249ebc1cca9e56b7bdc92dbd8e71e424ede1bffe470a5c6c863528bb", &(0x7f00000001c0)=""/253, &(0x7f00000000c0)="8f7ba1b70cd835c9a9b23ca26158d47a4216dab733623447fbd08afc033815c767ad7608375fab6469a17c51ebb7cfa0ec8de13aa53814b7ca76bdbe325128df17e1056b9f72cbc775d931dc6a78d466084d7972006cb7390ffc995c", &(0x7f00000003c0)="b02a09982e211cb54c4ba9250cdf1b761a1303fad42c9155726dda80156fd5a17c8be118ba2ddc0dd75ee5ae4daa0b9cd95c3b66f7903d5376dd37eac39513c98ea4597a6eea87d9470f8ddad3613251a8addecc3ea4a58e10769b64b68f6668f237f2408b6a7b9af8dfb74e53ab45e26d2dab4fa42f77ffb777951b18535bdcb55b7ff7dc7c1739c570a6122372f6f08fd342056ba747300c3f2214150db6eb9f1d32f454aa133111b82bbe09f9559c7d52c1813ca92fc0556fcd9d7ecba76886db39b652d895ffcee55a76df630cc52483a3ca1053269c2aaaeed76365ffbf7c8752431f052661a479", 0x9, r2, 0x4}, 0x38) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) [ 727.122282][T28327] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 20:35:36 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000001}, 0x99d2e96632912ab) 20:35:36 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000000423040025bd000000000008000101000000000000000000000000100400"/48], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000001) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 20:35:36 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 20:35:39 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:35:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x7, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xa, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:39 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r1 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r1, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, 0x0) sendmsg$rds(r1, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:35:39 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r3 = socket$netlink(0x10, 0x3, 0x15) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="0900f9359890563d164408") sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0x151, 0xffc0000000000000) r4 = openat$cgroup_ro(r0, &(0x7f0000000240)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='io.stat\x00', 0x7a05, 0x1700) sendfile(r5, r4, 0x0, 0x8000000000004) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000200)={r6}) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r7, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x20008fed, &(0x7f0000000280)={0x2, 0x4e23, @private=0xa010100}, 0x10) socketpair(0x4, 0x6, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r8, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="000048761527913fbbdc2795057fa3efd4ab56478b0602fa065bd7b67c1e8c4d69001f33395c367efb312672a4813ced481158d9fa666bae6f9bf7057f9afbec6a570c8fc933b57c70819de8831c6aef27f925a8ee96183a7d171b936fdfd0b3", @ANYRES16=r9, @ANYBLOB="10002cbd7000fcdbdf25050000000c00068008000100030000009c00058008000100756470001400028008000400ff000000080001000f0000001400028008000300e200000008000300ff0f0000070001006962000024000280080004000200000008000200010100000800020004000000080001001f0000000700010069620000080001007564700024000280080003008a0100000800010006000000080001000700000008000200070000000700010069620000780005801400028008000200ffff000008000400480000002c000280080004000200000008000300070000000800040008000000080001000d000000080004000500000008000100657468002400028008000100040000000800030009000000080002000800000008000400639b000008000100657468003000068008000100040000000800010000000000040002000800010045ff000008000100ed0b0000080001006c0d00003000028008000100aa31000008000200810000001c000380080001008100000008000200080000000800020003000000200002801c00038008000200ffff0000080002000800000008000200070000009c0001800e0001006574683a626f6e643000000044000400200001000a004e21000000b5ff02000000000000000000000000000100010000200002000a004e2000000fffff0100000000000000000000000000010800000008000300050000003c00028008000300030000000800030005000000080001000b000000080001001a00000008000200800000000800030049c80000080004000500000080000180380004001400010002004e23ffffffff0000000000000000200002000a004e240000007ffc020000000000000000000000000000fffffeff08000300008000000d0001007564703a73797a31000000002c000280080003000000000008000200000400000800040011f4ffff0800030005000000080002000600000050000280080002006c0500003c00038008000200040200000800020006000000080001000600000008000200a000000008000200018000000800010011f9ffff08000100040000000800020006000000"], 0x320}, 0x1, 0x0, 0x0, 0xd0}, 0x40) sendto$inet(r7, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r6, 0x0, r1, 0x0, 0x4, 0x6) [ 729.947525][T28388] validate_nla: 2 callbacks suppressed [ 729.947534][T28388] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 730.012293][T28391] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 730.033347][T28394] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 20:35:39 executing program 0: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") ioctl$sock_ifreq(r2, 0x0, &(0x7f0000000040)={'geneve1\x00', @ifru_data=&(0x7f0000000000)="c8946e21219edd2164128eabfe3c1e3d1354c203a284937223d6707c20771b56"}) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000300)="38475f9d8820bdfd63da5a8db5993fb1289f12048bff64618d554157146aefa37f06053d759b36b75c027b78afde66ca390acb4b3a2e65682353118c9e3ce2238919832520af356cdb20d2bf33d799781eddd0c1cbaa2f697361cda55cab47dc1b3ed7277ba26db1ee8e0cda8b", 0x6d}, {&(0x7f0000000400)="8b9501db2ff9a06cbc2376d81c3fc0dd1a856d266bab030322d0ab07cfb892bc5e0332909b064ccc08894c4f465edfffecefbf8872164508779e14da930873ef71445724b07f87a04020b696eed1b7002f6eaa18ee7a939f95771cf921ac5055", 0x60}, {&(0x7f0000000480)="11ac1879c6384a1803f4a25a4f21f9f5b56c8b72effc0d2c3b6a50f943577bac38166a717a74528fecdc0021c6fa2c682281630af62e26aa5ef3c08b3f69a5231c5d43e0a8df81fa72420d81ea59cc5dd47f61ae630899713d88521637fc6ce4ba2258807dc517114d1ed190f4758063cd0ced5711ac50569222536a512bde19c727964a1cc9dcbdcddb278dd84b40046cb833affdca142676c86866958db9f5d6bb248d7bb22177d983127ac57b279186b01df0c920753d6a40a97d7e62a0218ce5daf89b6d8004f141dbb44587131b7ec63aa20a4121134ccf0a", 0xdb}], 0x3) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e22, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000580)="823788e9865114d07aecbc2245eb827a7754e5b6477e971a2536993faa03ff70827f28a46879011af4205bc8343278b0dc6472360f31359bf5c69a2e0dfe6b345ea68750f0da9b8144d4d008c5632cbe0363391c78292b") ioctl$SIOCX25SSUBSCRIP(r4, 0x89e1, &(0x7f0000000600)={'gretap0\x00', 0x3, 0x5}) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000000)={r6}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000700)=ANY=[@ANYRES32=r6, @ANYBLOB="080064000418257242771db29744c62a8abfaf47b820ae1744ec3032693398f1f8e2c1aa260810c5e87dd25fbb9abc2ec797683481e5bed07b7976cfeed3422b6eefbd5921f16164de3fe245cf8bd929af36338269a591e078b6f5818fb24d20086a1142cc18055e3b5b9edf57"], 0x6c) [ 730.198632][T28395] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 730.245458][T28388] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 730.283612][T28391] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 20:35:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) [ 730.366128][T28426] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 20:35:39 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540), 0x0, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) [ 730.532960][T28395] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 20:35:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:39 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 730.637714][T28434] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 20:35:39 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540), 0x0, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) [ 730.682281][T28440] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 20:35:39 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540), 0x0, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:35:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xa, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:39 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={0xffffffffffffffff, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:35:40 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000000004) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = socket(0xa, 0x1, 0x0) close(r4) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0)={0x0, 0x0, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000040)=@sack_info={r6, 0x20, 0x48}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r7, 0x3}, 0xc) r8 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r8, 0x1, 0x23, &(0x7f0000000000)=0x401, 0x4) sendmsg$L2TP_CMD_SESSION_CREATE(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 20:35:40 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:35:42 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) sendfile(r0, r1, 0x0, 0xf03b0000) r2 = openat$cgroup(r1, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r4, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r4, 0x0, r3, 0x0, 0x7fffffff, 0x0) 20:35:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:42 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x5, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:35:42 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xe, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:42 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={0xffffffffffffffff, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:35:42 executing program 0: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:35:42 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0xffffffffffffff4b) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) 20:35:42 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r2, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000140), &(0x7f00000001c0)=0x14) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000d8000c14020025bd70000240002508003d000000000008003d0002000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x5) 20:35:42 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) sendfile(r0, r1, 0x0, 0xf03b0000) r2 = openat$cgroup(r1, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r4, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r4, 0x0, r3, 0x0, 0x7fffffff, 0x0) 20:35:42 executing program 0: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r2, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000140), &(0x7f00000001c0)=0x14) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000d8000c14020025bd70000240002508003d000000000008003d0002000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x5) 20:35:42 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r3, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_BSS(r4, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r5, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40891}, 0x4850) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r5, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0xeb}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c8c0) sendto$inet(r2, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) splice(0xffffffffffffffff, &(0x7f0000000000), r0, &(0x7f0000000040)=0x6, 0x33d86f3b, 0x0) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) 20:35:42 executing program 0: pipe(&(0x7f0000000380)={0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r2, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x20040010) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087f9, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000280)="0c268a927f1f65aa6913191241ba7860005cf65ac618ded8b70c51abeaf4cc834ff922b3f1e0b02bd67aa03059bc0000a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x4d, 0x44070, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="2d72646d61202d70696473202b696f20c7052c6661202b72646d61201072646d61202b637075202d63707520"], 0x31) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f00000001c0), &(0x7f0000000300)=0x4) sendfile(r4, r3, 0x0, 0x8000000000004) r6 = openat$cgroup_ro(r3, &(0x7f0000000200)='cpu.stat\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r7, r6, 0x0, 0x8000000000004) setsockopt$packet_int(r7, 0x107, 0x11, &(0x7f0000000000)=0xfff, 0x4) 20:35:42 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) openat$cgroup_ro(r0, &(0x7f0000000000)='memory.events\x00', 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) 20:35:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xe, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:42 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x6, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:35:42 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000400)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0xc3, 0x1f, 0x7, 0x6, 0x2, 0x6, 0x7fffffff, 0x18a, 0x40, 0x176, 0x6, 0x8, 0x38, 0x1, 0x8, 0xf75f, 0x9}, [{0x3, 0x1000, 0x0, 0x7fff, 0x7, 0x1, 0xbd6, 0x80000001}, {0x2, 0x6, 0x6, 0x6c6dc2d4, 0x0, 0x100000000, 0x7, 0xfffffffffffffc01}], "bd728f2e304a2f4e872f35ef9fab469ef14c55b17d09fd8d2e8482b3126c55ce7adbb059b9db7dc2abafdbe00c7fdc37b5aa346e0d9c846f579bfcf07104f247903821f64cb2caf5979aeb53dd38f7576a2ae60cc71373933e83edb774c8acf41a5a8dca7d77ba65a20b7f3d93a7351fd4c778446d668f1891c8bd0dece9793b0e4f3fbcd99f4064abf65a3b8c203f6e28a9ff79f5ee884eb000f8ba1495217ea122ed1acffa64a65188d8a5be5153a0752f6bc86c5b98eda8c07a9e161f79", [[], [], [], [], [], []]}, 0x76f) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x4}, 0x8) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) 20:35:43 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={0xffffffffffffffff, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:35:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:43 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) getsockopt$netlink(r0, 0x10e, 0x8, &(0x7f0000000100)=""/195, &(0x7f0000000000)=0xc3) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x7fffffff, 0x0) 20:35:43 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) getsockopt$inet_udp_int(r3, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) 20:35:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:43 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) sendfile(r4, r3, 0x0, 0x8000000000004) r6 = openat$cgroup_ro(r3, &(0x7f0000000140)='cpuacct.stat\x00', 0x7a05, 0x1700) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0xf000) sendfile(r6, r7, 0x0, 0xf03b0000) sendfile(r6, r2, 0x0, 0x8000000000004) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000000000)=0x7, 0x4) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) 20:35:43 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x7, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:35:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x12, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:43 executing program 0: pipe(&(0x7f0000000380)={0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r2, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x20040010) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087f9, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000280)="0c268a927f1f65aa6913191241ba7860005cf65ac618ded8b70c51abeaf4cc834ff922b3f1e0b02bd67aa03059bc0000a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x4d, 0x44070, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="2d72646d61202d70696473202b696f20c7052c6661202b72646d61201072646d61202b637075202d63707520"], 0x31) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f00000001c0), &(0x7f0000000300)=0x4) sendfile(r4, r3, 0x0, 0x8000000000004) r6 = openat$cgroup_ro(r3, &(0x7f0000000200)='cpu.stat\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r7, r6, 0x0, 0x8000000000004) setsockopt$packet_int(r7, 0x107, 0x11, &(0x7f0000000000)=0xfff, 0x4) 20:35:43 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x8, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:35:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x12, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:43 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r1 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r1, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000380)={r0}) sendmsg$rds(r1, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:35:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x16, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:44 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:35:44 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8982, &(0x7f0000000000)={0x7, 'dummy0\x00', {0x80000000}, 0x9}) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) [ 735.090447][T28649] validate_nla: 27 callbacks suppressed [ 735.090456][T28649] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 20:35:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x16, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) [ 735.207938][T28657] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 735.255322][T28659] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 20:35:44 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) setsockopt$IP_VS_SO_SET_DEL(r4, 0x0, 0x484, &(0x7f0000000000)={0x32, @local, 0x4e21, 0x3, 'wrr\x00', 0x2, 0x2, 0x65}, 0x2c) r5 = gettid() syz_open_procfs$namespace(r5, 0xfffffffffffffffe) syz_open_procfs$namespace(r5, &(0x7f0000000040)='ns/ipc\x00') syz_open_procfs$namespace(r5, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000080)=r5) splice(r3, 0x0, r1, 0x0, 0xc, 0x0) 20:35:44 executing program 0: pipe(&(0x7f0000000380)={0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r2, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x20040010) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087f9, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000280)="0c268a927f1f65aa6913191241ba7860005cf65ac618ded8b70c51abeaf4cc834ff922b3f1e0b02bd67aa03059bc0000a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x4d, 0x44070, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="2d72646d61202d70696473202b696f20c7052c6661202b72646d61201072646d61202b637075202d63707520"], 0x31) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f00000001c0), &(0x7f0000000300)=0x4) sendfile(r4, r3, 0x0, 0x8000000000004) r6 = openat$cgroup_ro(r3, &(0x7f0000000200)='cpu.stat\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r7, r6, 0x0, 0x8000000000004) setsockopt$packet_int(r7, 0x107, 0x11, &(0x7f0000000000)=0xfff, 0x4) [ 735.381830][T28649] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 20:35:44 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000100)={0x3, 0xff, 0x5, 0x5}, 0x8) sendfile(r2, r1, 0x0, 0x8000000000004) getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) r6 = socket$inet6(0xa, 0x3, 0x3a) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000000000008000a000000000008001700", @ANYRES32=r6, @ANYBLOB="9d969ae4263d05e3f33e1eff2935f46f142b51d58e179f8e19b6000000000006000000007889c447751d5b9a"], 0x3c}}, 0x0) sendto$inet(r5, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r5, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r5, 0x0, r0, 0x0, 0x7fffffff, 0x0) [ 735.478208][T28657] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 20:35:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2e, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) [ 735.597162][T28688] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 20:35:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2e, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:44 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xa, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:35:44 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r1 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r1, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000380)={r0}) sendmsg$rds(r1, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) [ 735.779984][T28699] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 735.896987][T28702] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 735.955927][T28688] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 20:35:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x48, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:45 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 736.194100][T28719] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 20:35:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x48, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:45 executing program 0: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) sendfile(r4, r3, 0x0, 0x8000000000004) r6 = openat$cgroup_ro(r3, &(0x7f0000000140)='cpuacct.stat\x00', 0x7a05, 0x1700) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0xf000) sendfile(r6, r7, 0x0, 0xf03b0000) sendfile(r6, r2, 0x0, 0x8000000000004) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000000000)=0x7, 0x4) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) 20:35:45 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={0x2c, r4, 0x401, 0x0, 0x0, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}}, 0x2c}}, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r4, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x6}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4044810) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000008f00)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000008f40)=0x4) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x1, 'syzkaller1\x00'}) 20:35:45 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) 20:35:45 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) r2 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300)=0x10) setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000340)=0x1, 0x4) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) 20:35:45 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r1 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r1, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000380)={r0}) sendmsg$rds(r1, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:35:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x4a, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:45 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xe, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:35:45 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x15, 0x240087bd, &(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) 20:35:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x4a, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:46 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @private=0xa010100}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") splice(r2, 0x0, r0, 0x0, 0x107fffffff, 0x0) 20:35:46 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:35:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x4c, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:46 executing program 0: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) sendfile(r4, r3, 0x0, 0x8000000000004) r6 = openat$cgroup_ro(r3, &(0x7f0000000140)='cpuacct.stat\x00', 0x7a05, 0x1700) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0xf000) sendfile(r6, r7, 0x0, 0xf03b0000) sendfile(r6, r2, 0x0, 0x8000000000004) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000000000)=0x7, 0x4) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) 20:35:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x4c, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:46 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x12, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:35:46 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(0xffffffffffffffff, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:35:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x60, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:46 executing program 0: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:35:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x60, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:47 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000100)={0x3, 0xff, 0x5, 0x5}, 0x8) sendfile(r2, r1, 0x0, 0x8000000000004) getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) r6 = socket$inet6(0xa, 0x3, 0x3a) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000000000008000a000000000008001700", @ANYRES32=r6, @ANYBLOB="9d969ae4263d05e3f33e1eff2935f46f142b51d58e179f8e19b6000000000006000000007889c447751d5b9a"], 0x3c}}, 0x0) sendto$inet(r5, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r5, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r5, 0x0, r0, 0x0, 0x7fffffff, 0x0) 20:35:47 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x16, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:35:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x68, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x68, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:49 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(0xffffffffffffffff, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) 20:35:49 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2e, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:35:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x8911, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$sock(r0, &(0x7f0000000340)={&(0x7f0000000180)=@generic={0x9, "58676eeccfe9d78c7783b4cbaf2e5bf5181f760d3005710f6628a650492a4a236cbabf65b2ac1955e53b2c6a447d0bca438deac4fcac82721f20c64c3b75ff14ff363a7a43fb66605d240040117262a104ddf5bba2b38e7912d161608b8b0d2c605a66cda198384e240263ee45c5e585c1b2b39b8d26dec7a30987b3e7df"}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000200)="653091cbbe7af4bea3c3ebc2d4bf3e8ef73a7fa228a23d02421e50de255d56689b44e4642e1da53743e42977b8bc651fe0717eff0eff86a01552516b026b89184adfe62f87d6ad381902c4aaeab70ece9ff921d073432be74da1ee50a4771dcf1af45ad2d3c6716a7b31c8f0ea3b87", 0x6f}, {&(0x7f0000000100)="56ad2890c3", 0x5}, {&(0x7f0000000280)="700172e3bd52319d17f029671065d5864d56078f4019d5df2fee69d2605e580602ce36bfcf6fed9548ca5656877389deb0475cd5bebcbc174fff1c2e5b6319c18be7f536eb3ac2c829b2a29f9df87186bf09674b44d035d95c5d1e2eaf1dee", 0x5f}], 0x3, &(0x7f0000000400)=[@mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0xa8}}, @mark={{0x14, 0x1, 0x24, 0x5}}], 0x48}, 0x8011) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, &(0x7f0000000000)="0c268a927f1f6588b967481241ba7860005cf65ac61896ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea67333da2a8fecf90b1a7511bf746bec66ba0efcbf", 0x51, 0x44070, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0x8000000000004) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000080)) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) 20:35:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x12, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:49 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) accept$nfc_llcp(r0, &(0x7f0000000000), &(0x7f0000000080)=0x60) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) [ 740.110157][T28889] validate_nla: 25 callbacks suppressed [ 740.110167][T28889] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 20:35:49 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r3, r2, 0x0, 0x8000000000004) recvfrom$llc(r3, &(0x7f0000000000)=""/68, 0x44, 0x20, &(0x7f0000000080)={0x1a, 0x18, 0x5a, 0x2, 0x7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x10) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) r5 = accept$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000180)=0x1c) bind$rose(r0, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) ioctl$sock_inet6_udp_SIOCINQ(r5, 0x541b, &(0x7f00000001c0)) [ 740.287599][T28890] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 20:35:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) [ 740.338042][T28883] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 740.393928][T28885] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 740.436980][T28916] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 20:35:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x6c, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:49 executing program 0 (fault-call:1 fault-nth:0): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) [ 740.634302][T28890] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 20:35:49 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x48, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 740.707471][T28925] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 20:35:49 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) [ 740.816005][T28935] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 20:35:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x6c, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:50 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0x2, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) 20:35:50 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(0xffffffffffffffff, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000003580)=""/4105, 0x1009}], 0x1}, 0x0) [ 740.951143][T28925] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 20:35:50 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xa, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) [ 741.046363][T28953] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 20:35:50 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x4a, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:35:50 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) 20:35:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x74, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:50 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000000004) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@mcast1, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f00000001c0)=0xe8) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10310068}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000227bd7000ffdbdf2520000000f420ac66f5369e0008000100020000001c000100010000000800575336632a83844a503276699da55dc23f141665f9cdee32764b30a7c70016b64af7c0b74bf992295d0d421b50408ef18029287a06f29cb1de99feb503a0d6584332499a093797761bfca2ba7dc00996b3345a06f800031d34bb8c445e7184e056a67d0887ded4350d9da173b386aa314617fce1bf7bbf2cfee9213e85947c03f48ee354a90dcf165cb13c7033455023dcc1b467d1abf11c6be833631a88e5491a7a39d002c56875bde15a612b4994ec9f165c0a840aff4f3b9659", @ANYRES32=r3, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x20040004}, 0x8000) sendto$inet(r2, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0xf000) sendfile(r5, r6, 0x0, 0xf03b0000) sendfile(r5, r4, 0x0, 0x8000000000004) setsockopt$SO_J1939_SEND_PRIO(r4, 0x6b, 0x3, &(0x7f0000000080)=0x6, 0x4) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='rdma.current\x00', 0x7a05, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) sendfile(r7, r8, 0x0, 0xf03b0000) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x2}, 0x4) 20:35:50 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x6}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) 20:35:50 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0xa}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) 20:35:50 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x2, @bcast}, 0x1c) 20:35:50 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, @bcast}, 0x1c) 20:35:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x74, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:50 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x4c, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:35:50 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, 0x0, 0x0) 20:35:50 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0xa, @bcast}, 0x1c) 20:35:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x78, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x78, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:51 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x10e, @bcast}, 0x1c) 20:35:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x7a, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:51 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) 20:35:51 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x60, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:35:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x7a, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:51 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) 20:35:51 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x2000009c) 20:35:51 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r1, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="a0060000000701080000000000000000000000050c00078008000140000000071c00078008000240000000050800024000000a0f08000140000000040c00024000000000000000090c000240000000008000000008000540000000010900010073797a31000000000c00024000000000000100012c000780080001400008000008000140000000010800014000000006080002400000002f0800014000000005"], 0xa0}, 0x1, 0x0, 0x0, 0x404c004}, 0x37ad578f6c19ab74) 20:35:51 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, 0x0, 0x0) 20:35:51 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) r4 = accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000c40), 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r5, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r6}) ioctl$SIOCAX25ADDUID(r4, 0x89e1, &(0x7f0000000c80)={0x3, @null, r6}) recvmsg$can_j1939(r3, &(0x7f0000000240)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)=""/33, 0x21}, {&(0x7f0000000100)=""/235, 0xeb}], 0x2}, 0x11) getsockname$inet(r7, &(0x7f0000000280)={0x2, 0x0, @dev}, &(0x7f00000002c0)=0x10) 20:35:51 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) r1 = syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) writev(r1, &(0x7f0000000300)=[{&(0x7f00000000c0)="313bfd0396c00bec70b675a875822a2c3cb37908d95cb13cbd49e36a77b4ab3f670e", 0x22}, {&(0x7f0000000100)="e5cd41c31ee12a7c342c41ca3c34066a440f8eb795b3b582baa8a77f54e0c265587e6aea5beab3a566ae30f2239f9062e03060a3e3f621d6d5f3780a1bb9c87c373140f29940bddababf6bdbb4379aa080d2456dade5e8ea093de9d8569276936e0b5634e144610f521efbde272b79590382f415c7c665dbfb4c5d84fb9524e02b43cf25eccf98d440565685225c03f4c28c38c0eda48ac7a3261cb8e8d203ac0c1fe393bcd51a876761aa38c4fcc7b3c8febd2abc95e79a5de728617606477c85a47d942bf12db6045be47300dd8d2ba62601f49be046ed", 0xd8}, {&(0x7f0000000200)="f4351a281aa27ab96ee72b164c69baeaaedb1744586ac6a4fe02b3f275d94313fde38c301f9e5e456252934924d5dc9b6e8ac21c4f53ed", 0x37}, {&(0x7f0000000240)="4ba831ef809a5fdafcba4a7255bc8d823066c1e60800e7e99a69a81e9ead628991b9eec18a03108466bc86a7634570f9276d8ea8941c503e5dcb3a0e53e0592e4ee27e05e3dbd0a129e08dd0a05dbbf26b1ce79cfd77fdf3cae43c9b69742fc647ac9475da5dd5", 0x67}], 0x4) 20:35:51 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x68, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:35:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xd7, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:51 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r1, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="d03e1f26649f1185f50be4021b1c5738a832f2f5fb39d185791b747e9c61e255b392ad21d66f48fc119faf0c2e39e17b954829c1520fab744ea499cf12ce056a63df2f3e1b5dabc762f6a649c1ecf10fc1632b727f", @ANYRES16=r2, @ANYBLOB="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"], 0x3}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, r2, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xf8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x8004) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) 20:35:51 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000000)={0x1f, @none}, 0x8) listen(r2, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000000100), 0x8) listen(r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r4, &(0x7f0000000040)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x4d, 0x2d3ccfd5d05b389f, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000000)=0x8bad, 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") splice(r5, 0x0, r1, 0x0, 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r7, r6, 0x0, 0x8000000000004) ioctl$TUNSETSTEERINGEBPF(r6, 0x800454e0, &(0x7f0000000140)=r0) 20:35:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xd7, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:52 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) connect$rose(r1, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x6, [@bcast, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) r2 = socket(0xa, 0x1, 0x0) close(r2) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000000)={r4}, 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000140)={r4, @in6={{0xa, 0x4e21, 0x8, @private1={0xfc, 0x1, [], 0x1}, 0x1}}, [0x2, 0x9, 0x1000, 0x1000, 0x1ff, 0x39, 0x6, 0x2, 0xb3, 0x10000, 0x2, 0xfffffffffffffffd, 0x1, 0xffff, 0x1]}, &(0x7f0000000040)=0x100) 20:35:52 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = accept(r0, &(0x7f0000002400)=@rc, &(0x7f0000002480)=0x80) r2 = getuid() ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f00000024c0)={0x3, @bcast, r2}) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) 20:35:52 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0x8000000000004) accept4$netrom(r3, &(0x7f0000000080)={{0x3, @rose}, [@default, @netrom, @rose, @remote, @rose, @default]}, &(0x7f0000000100)=0x48, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl(r5, 0x1000008912, &(0x7f0000000240)="080db5055e0bcfe847a0716b8dd9022ff7cb0c99855a100b39ff") r6 = socket$rxrpc(0x21, 0x2, 0xa) r7 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r7, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) sendfile(r6, r7, 0x0, 0x3) sendfile(r1, r0, 0x0, 0x8000000000004) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000040)={0x1ff}, 0x4) syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x3, [@null, @default, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x40) 20:35:52 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) recvfrom$inet(r2, &(0x7f00000000c0)=""/4096, 0x1000, 0x0, 0x0, 0x0) 20:35:52 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, 0x0, 0x0) 20:35:52 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r1, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) ioctl$FIONCLEX(r1, 0x5450) socket$inet(0x2, 0x2, 0x5) recvfrom$rose(0xffffffffffffffff, &(0x7f00000000c0)=""/133, 0x85, 0x2, &(0x7f0000000000)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) 20:35:52 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x6c, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:35:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:52 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) syz_extract_tcp_res(&(0x7f0000000000), 0x35cd042, 0x1) 20:35:54 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) clock_gettime(0x0, &(0x7f0000003980)={0x0, 0x0}) recvmmsg(r1, &(0x7f00000038c0)=[{{&(0x7f0000000000)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000100)=""/246, 0xf6}, {&(0x7f0000000200)=""/185, 0xb9}, {&(0x7f0000000080)=""/42, 0x2a}, {&(0x7f00000002c0)=""/129, 0x81}, {&(0x7f0000000400)=""/61, 0x3d}, {&(0x7f0000000440)=""/242, 0xf2}, {&(0x7f0000000540)=""/223, 0xdf}, {&(0x7f0000000640)=""/142, 0x8e}, {&(0x7f0000000700)=""/131, 0x83}, {&(0x7f00000007c0)=""/247, 0xf7}], 0xa, &(0x7f0000000980)=""/177, 0xb1}, 0x8}, {{&(0x7f0000000a40)=@x25={0x9, @remote}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000ac0)=""/230, 0xe6}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/140, 0x8c}, {&(0x7f0000000c80)=""/28, 0x1c}, {&(0x7f0000000cc0)=""/252, 0xfc}, {&(0x7f0000000dc0)=""/244, 0xf4}, {&(0x7f0000000ec0)=""/176, 0xb0}, {&(0x7f0000000f80)}, {&(0x7f0000000fc0)=""/103, 0x67}, {&(0x7f0000001040)=""/98, 0x62}], 0xa, &(0x7f0000001180)=""/243, 0xf3}, 0x94b6}, {{&(0x7f0000002340)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000003800)=[{&(0x7f00000023c0)=""/188, 0xbc}, {&(0x7f0000002480)=""/89, 0x59}, {&(0x7f0000002500)=""/4096, 0x1000}, {&(0x7f0000001280)=""/49, 0x31}, {&(0x7f0000003500)=""/128, 0x80}, {&(0x7f0000003580)=""/113, 0x71}, {&(0x7f0000003600)=""/188, 0xbc}, {&(0x7f00000036c0)=""/245, 0xf5}, {&(0x7f00000037c0)=""/20, 0x14}], 0x9}, 0x2}], 0x3, 0x40, &(0x7f00000039c0)={r2, r3+10000000}) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000002c0)='bic\x00', 0x4) sendto$inet(r6, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000003b40)=ANY=[@ANYBLOB="672c07db2868f98d5ee7a7bf5c8d482be6c449916386301ad0a03b464f5d123f5773c797ca697dbc3e966618ed8041f76af7b410c93cd10cdf6001b56e98968fa106bc66d28695604b6acd86db0cd134b8b6a4c1ccc84fba2ab470de006aed1cce61328a710090439724e0176d608f05350f3e777bb8b51f182518efe7ed50546017a0b1b076eef00e85e09d648a56f088df1a096a92ddb703664fa5a2f4badafb8218afa7a8ab2fa473eb6da273e7ed850cf64cf400"/193, @ANYRES16=r5, @ANYBLOB="01000000000000000000010000004000018008000800000000000c00070000000000000000000800050000000000070006006e71000008000b00736970000800090000000000060001000a000000"], 0x54}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000003b00)={&(0x7f0000003a00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003ac0)={&(0x7f0000003a40)={0x7c, r5, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xf0dd}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x18}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8d6a}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x44082}, 0x8) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) 20:35:54 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f00000000c0)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) r1 = gettid() syz_open_procfs$namespace(r1, 0xfffffffffffffffe) syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/ipc\x00') syz_open_procfs$namespace(r1, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000000)=r1) 20:35:54 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x74, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:35:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x124, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x124, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:54 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, 0x0}, 0x0) [ 745.893537][T29172] validate_nla: 23 callbacks suppressed [ 745.895238][T29172] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 20:35:55 executing program 0: connect$rose(0xffffffffffffffff, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, &(0x7f0000000180)=""/202, 0xca}, 0x121) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r1, r0, 0x0, 0x8000000000004) socket(0x23, 0x80000, 0x3) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[@ANYBLOB="330d0000000000190001000542077204018b8734dca7f81a981ccd1c8cf84e860592b51b2e87622600040000000000002aae8e314593a33ab11c4cd20a449204ca0708560900c96f58d610ff02000000000000000000000100"/104], 0x78) [ 745.953216][T29171] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 20:35:55 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000280)) bind$inet(r2, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r3, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') socket$isdn_base(0x22, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f00000001c0), &(0x7f0000000240)=0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="3400000010000104000020000000000000000000", @ANYRES32=r8, @ANYBLOB="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"], 0x34}}, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x40, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_STA_FLAGS={0x24, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x88) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) [ 746.018082][T29173] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 20:35:55 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @bcast, 0x1, @bcast}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) sendfile(r2, r1, 0x0, 0x8000000000004) sendmsg$rds(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/243, 0xf3}], 0x1, &(0x7f00000001c0)=[@rdma_dest={0x18, 0x114, 0x2, {0x7, 0x100}}], 0x18, 0x40020}, 0x41) [ 746.080263][T29197] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 746.148595][T29172] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 20:35:55 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x8000000000004) ioctl$sock_bt_hci(r3, 0x400448cc, &(0x7f0000000000)="01ddd9ed6ccd77bd167658b090830368feb736a183cbf32763cc01d96c4b9ca813fea2ecd63539409ee40bbf4383a7a01cbf78897dddba1e89b8a2aa43a151a76892b6bedafa23d75ceb1d0519a9402e83d8f83f7343d8320c8bbe4d60532d6a64afe4a950dc8e325e7ec37f35cdd0809ae2f9520ae7896513a01a28bac1ad3ce1070b22d8d47da5a497a277f10775b829b375f2c2a1c74a0ed538816f080e3ba509f017e2b22f7b9f502dc7329443a26d2b031d0357b753cefb110d") bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) [ 746.195074][T29203] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 746.223808][T29171] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 746.289559][T29173] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 20:35:55 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x78, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:35:55 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="b83deeeaa548c2ad89753c4db89e40a36ad71979a3a4ac8b9ee4ba3a6d6da5be1441b53f26ffa735ae57ff5d43314ce15e18da5064104181b1a6732568fb168875b62c962cb9c1d9e88a0682ed890742ef70ae476e2fc2daadbc2d5dafa3e47b1588c2484f809acb60a15f30d08a4daa3abcf7fc17668375d3a30661dce0b177fc11192a63586a5f158b3ea837c313f4292f7cb75cc819e0226cf23133f7a5c7d0c6dfe29ed6a2f1738c85acc495bb7db80c8d881700ebd7674df56157262dbc885ec57c152349d2d04fdfd069fbf69b17fd7cb1c7e2823867662475533269d1dd", 0xe1, 0x4c8e1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) [ 746.478219][T29225] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 20:35:55 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet(0x2, 0x6, 0x92a) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) 20:35:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x188, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x188, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:55 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x24008fe9, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") splice(r1, 0x0, r2, 0x0, 0x7fffffff, 0xc) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/133, &(0x7f0000000100)=0x85) [ 746.681222][T29238] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 20:35:55 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, 0x0}, 0x0) [ 746.775101][T29225] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 20:35:56 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r3, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) getsockopt$netlink(r3, 0x10e, 0xc7df8c5667869e87, &(0x7f0000000100)=""/18, &(0x7f0000000180)=0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r5, r4, 0x0, 0x8000000000004) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000080)={0x7}, 0x4) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000000)=0x5, 0x4) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) [ 746.849958][T29243] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 20:35:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1cc, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:56 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x2, &(0x7f0000000000)=0x7, 0x4) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) 20:35:56 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x7a, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:35:56 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) r2 = socket(0x22, 0x4, 0x80000000) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="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"], 0x3}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r3, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}]}, 0x38}, 0x1, 0x0, 0x0, 0x4880}, 0x20000005) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) 20:35:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1cc, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:56 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) r1 = socket(0xa, 0x1, 0x0) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000000)={r3}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={r3, 0x1000}, 0x8) 20:35:56 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(r0, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) sendfile(r4, r3, 0x0, 0x8000000000004) sendto$inet(r3, &(0x7f0000000000)="f78dbe7c0aa698462f38e0584782b3d52b79822bf5d4c35647e53782467ce28f164cd56256d1b2fd0228", 0x2a, 0x8080, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) bind$inet(r2, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r2, 0x0, r1, 0x0, 0x7fffffff, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r6, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) r7 = accept4(r6, &(0x7f0000000400)=@isdn, &(0x7f0000000340)=0x80, 0x80000) setsockopt$MISDN_TIME_STAMP(r7, 0x0, 0x1, &(0x7f0000000480)=0x1, 0x4) 20:35:56 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r1, r0, 0x0, 0x8000000000004) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@int=0x8, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) r4 = openat$cgroup_ro(r3, &(0x7f0000000880)='cpuacct.stat\x00', 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r4, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0xc0, 0x1, 0x7, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1ff}, @NFACCT_FILTER={0x4c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfffffffc}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x200}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4af6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xe3}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x30}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4008000}, 0x1) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r5, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) 20:35:56 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x2, 0x4) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x8000000000004) r4 = accept4$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xe, 0x800) sendmsg(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="ad766b8bfab2deba2028a74ccb616afc75c6fa3aa5264966abf5699ebbde19823a594c4393031ea118910fa36effd758dc833c9d5faca9f70ade9d3c7ce56b231b2bf9fd445609c3839ef73368d555fb82b9", 0x52}, {&(0x7f0000000180)="018491ce42c5a888825ae2865394c0eab3f274459d1dc1c1379e85f3aceccd68a24d457345ecc31e5c1ee4e5a09312059edd8f796ffe56bd23c9205d60080fe91ba28c79961ca993eb51550305750699194b458764954c6625d673eb2bfd6fb17ca60c46503546b81635f5eb16f96105f52e033dbef8da09a1bc97c734a6f1cf32aa1d2fa3562e5773b6dd432cb504b93260f6505c9cc97e2c", 0x99}], 0x2}, 0x400c010) sendto$inet(r1, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) splice(r1, 0x0, r0, 0x0, 0x7fffffff, 0x0) 20:35:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x22f, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:56 executing program 5: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x78, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:35:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x22f, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:56 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, 0x0}, 0x0) 20:35:56 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xad, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 747.835493][T29328] device macsec1 entered promiscuous mode [ 747.842753][T29328] device vlan0 entered promiscuous mode [ 747.856972][T29328] device vlan0 left promiscuous mode 20:35:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x26c, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x264, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:57 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xd7, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:35:57 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, 0x0}, 0x0) 20:35:57 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000000004) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='cpuset.memory_pressure\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x80000001, 0x0, {0x0, 0x0, 0x0, r5, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x40}}, 0x24) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0xe0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x6, 0x1}, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x6, 0x80000000, 0x345d}, &(0x7f0000000240)=0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=0xd0d}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x10, &(0x7f0000000500)={&(0x7f0000000300)=""/163, 0xa3, r6}}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200), 0xf000) sendfile(r8, r9, 0x0, 0xf03b0000) sendfile(r8, r7, 0x0, 0x8000000000004) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0xa, &(0x7f0000000000)=ANY=[@ANYBLOB="0d600800f0ffffffa52001000800000085100000feffffff18260000", @ANYRES32, @ANYBLOB="0000000009000000012490006d2f000018130000", @ANYRES32=r2, @ANYBLOB='\x00'/12], &(0x7f00000000c0)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x5, [], r5, 0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x5, 0xd, 0xffff, 0x81}, 0x10, r6, r7}, 0x78) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) [ 748.520279][T29371] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 20:35:57 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)}, 0x0) 20:35:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x28a, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:57 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:35:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x26c, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2c6, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:58 executing program 5: connect$rose(0xffffffffffffffff, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, &(0x7f0000000180)=""/202, 0xca}, 0x121) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r1, r0, 0x0, 0x8000000000004) socket(0x23, 0x80000, 0x3) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[@ANYBLOB="330d0000000000190001000542077204018b8734dca7f81a981ccd1c8cf84e860592b51b2e87622600040000000000002aae8e314593a33ab11c4cd20a449204ca0708560900c96f58d610ff02000000000000000000000100"/104], 0x78) 20:35:58 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x124, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:35:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x28a, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:58 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)}, 0x0) 20:35:58 executing program 5: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:35:58 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x8000000000004) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r3, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) [ 749.613035][T29434] device macsec1 entered promiscuous mode [ 749.622698][T29434] device vlan0 entered promiscuous mode [ 749.633119][T29434] device vlan0 left promiscuous mode 20:35:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2c8, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2c8, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:59 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000000004) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@mcast1, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f00000001c0)=0xe8) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10310068}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000227bd7000ffdbdf2520000000f420ac66f5369e0008000100020000001c000100010000000800575336632a83844a503276699da55dc23f141665f9cdee32764b30a7c70016b64af7c0b74bf992295d0d421b50408ef18029287a06f29cb1de99feb503a0d6584332499a093797761bfca2ba7dc00996b3345a06f800031d34bb8c445e7184e056a67d0887ded4350d9da173b386aa314617fce1bf7bbf2cfee9213e85947c03f48ee354a90dcf165cb13c7033455023dcc1b467d1abf11c6be833631a88e5491a7a39d002c56875bde15a612b4994ec9f165c0a840aff4f3b9659", @ANYRES32=r3, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x20040004}, 0x8000) sendto$inet(r2, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0xf000) sendfile(r5, r6, 0x0, 0xf03b0000) sendfile(r5, r4, 0x0, 0x8000000000004) setsockopt$SO_J1939_SEND_PRIO(r4, 0x6b, 0x3, &(0x7f0000000080)=0x6, 0x4) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='rdma.current\x00', 0x7a05, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) sendfile(r7, r8, 0x0, 0xf03b0000) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x2}, 0x4) 20:35:59 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x188, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:35:59 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)}, 0x0) 20:35:59 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r1, r0, 0x0, 0x8000000000004) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm], 0x1) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r2, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x12) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') r6 = socket$inet(0x2, 0x3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f00000001c0)={0x0, @local, @local}, &(0x7f00000000c0)) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="110700080000000000000b00000008000300", @ANYRES32=r7, @ANYBLOB], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r5, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x100) 20:35:59 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x8000000000004) recvmsg$kcm(r1, &(0x7f0000001400)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f0000001340)=[{&(0x7f00000000c0)=""/231, 0xe7}, {&(0x7f00000001c0)=""/69, 0x45}, {&(0x7f0000000240)=""/84, 0x54}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)}, {&(0x7f0000001300)=""/52, 0x34}], 0x6, &(0x7f00000013c0)=""/15, 0xf}, 0x60) 20:35:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2e0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:59 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @bcast}, 0x1c) 20:35:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2e0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:35:59 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x54, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x54}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x600df9cefd22bd72}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)={0x88, r2, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xe58}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffff66}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c044) r3 = socket$netlink(0x10, 0x3, 0x0) write(r3, &(0x7f0000000600)="8fce0e6c1c6dafc83e93443ca51301d31776e3713379de285d991c920e8cfe2c90d3999fa080265f50a895f5eaca45b30c410d6bc12fefaa4202070ac9a13061b987dc1af0eec362cae30a12539c87d9c472b1be781240f2806d9a7d06feb53e1dece4fa0ba10b0bac8eb816608a0b6cef10389673b35268293b228b8402aeabb40ab85303289fde927d2c452111998068169de581cce5036bf04f3a096f773bb016ab73bd4075676e57f6c2e6a4d7841ceb8dd34d23ac3634e5f2e6fcac168fa2630987b24c389a1c2c1fd1d7", 0xcd) getsockopt$netlink(r3, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r4, 0x65, 0x5, &(0x7f00000025c0), 0x4) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f00000004c0)=[{{0x3, 0x0, 0x1}, {0x81, 0x1, 0x0, 0x1}}, {{0x2, 0x1, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x4, 0x1, 0x1}, {0x0, 0x1, 0x1}}, {{0x3, 0x0, 0x1}, {0x2, 0x0, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x4, 0x0, 0x1, 0x1}}], 0x28) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x3c, r6, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6erspan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x13, 0x7, '/usr/sbin/ntpd\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, r5, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x56a}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) 20:36:00 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1cc, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:36:00 executing program 0: syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x8000000000004) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000080)=0x54) ioctl(r2, 0x3, &(0x7f0000000240)="4e5306e57c1a1fb25b5dda25c89a62bccd4f990d04e8d1814f5d448309028012ac105a3a3a28f83d8f3c4437b59354d4cd74727b9242f9a5a6a42abb917da1f5d2ef36572c9cc6cd4498a8a846679cf942a220d44befe3df2b2bd0761b636e48017cc5e7032a37eaa36955ef8d5854b600863eacf120b3039c0f5a93f3366a01cbedfadd1b8140ed9ca1e00f62e0ce21143f7cea6246ec4711136ac70c2d9e43e1806aa4d88e9ae7b346b104f70aa340cb0738544fb7c7b8baadc04e1ef230fe641aaa6751f492c0e7f6bf34c93efb1ce73ed7b61433d1423408f7518a4d1b0aa0b263bd0084") [ 750.947187][T29529] validate_nla: 36 callbacks suppressed [ 750.947196][T29529] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 751.011961][T29512] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 751.140408][T29520] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 20:36:00 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000000004) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@mcast1, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f00000001c0)=0xe8) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10310068}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000227bd7000ffdbdf2520000000f420ac66f5369e0008000100020000001c000100010000000800575336632a83844a503276699da55dc23f141665f9cdee32764b30a7c70016b64af7c0b74bf992295d0d421b50408ef18029287a06f29cb1de99feb503a0d6584332499a093797761bfca2ba7dc00996b3345a06f800031d34bb8c445e7184e056a67d0887ded4350d9da173b386aa314617fce1bf7bbf2cfee9213e85947c03f48ee354a90dcf165cb13c7033455023dcc1b467d1abf11c6be833631a88e5491a7a39d002c56875bde15a612b4994ec9f165c0a840aff4f3b9659", @ANYRES32=r3, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x20040004}, 0x8000) sendto$inet(r2, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0xf000) sendfile(r5, r6, 0x0, 0xf03b0000) sendfile(r5, r4, 0x0, 0x8000000000004) setsockopt$SO_J1939_SEND_PRIO(r4, 0x6b, 0x3, &(0x7f0000000080)=0x6, 0x4) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='rdma.current\x00', 0x7a05, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) sendfile(r7, r8, 0x0, 0xf03b0000) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x2}, 0x4) [ 751.225841][T29529] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 20:36:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:36:00 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{0x0}], 0x1}, 0x0) [ 751.411121][T29556] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 20:36:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:36:00 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x22f, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 751.616646][T29565] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 751.689707][T29569] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 751.748612][T29556] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 20:36:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000d07cdd87d345d28000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800007f7b0a14d782c5e129000000000013ec010000000000", @ANYRES32=0x0, @ANYBLOB="aaf200000700"/19], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003580)=ANY=[@ANYBLOB="74000000240007050064dcaeb95b570f00000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef670000000d280000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b5b2c43588e9b7ded6433b77c6fe188fdd2d026fa9948d847d2fe387"], 0x74}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x34, 0x64, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x3}, {0x4}}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x9) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r8, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40890}, 0x40000) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00.\x00\a\a\x00'/20, @ANYRES32=r9, @ANYBLOB="00e0ffffff00000204000280"], 0x34}}, 0x0) r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r10, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xa, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @bcast, @bcast]}, 0x40) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340)={0x1}, 0x4) 20:36:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x312, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) [ 751.975483][T29569] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 752.005913][T29584] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 752.039404][T29585] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 20:36:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x312, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) [ 752.080658][T29584] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 752.101086][T29584] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 752.131276][T29592] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 752.145517][T29592] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 752.163910][T29592] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 20:36:01 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{0x0}], 0x1}, 0x0) 20:36:01 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x26c, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:36:01 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) getsockopt$inet_mreq(r1, 0x0, 0x20, &(0x7f00000001c0)={@multicast1, @dev}, &(0x7f0000000240)=0x8) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @bcast}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r3, r2, 0x0, 0x8000000000004) getsockopt$inet6_buf(r3, 0x29, 0x2b, &(0x7f00000000c0)=""/148, &(0x7f0000000000)=0x94) 20:36:01 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000000004) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@mcast1, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f00000001c0)=0xe8) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10310068}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000227bd7000ffdbdf2520000000f420ac66f5369e0008000100020000001c000100010000000800575336632a83844a503276699da55dc23f141665f9cdee32764b30a7c70016b64af7c0b74bf992295d0d421b50408ef18029287a06f29cb1de99feb503a0d6584332499a093797761bfca2ba7dc00996b3345a06f800031d34bb8c445e7184e056a67d0887ded4350d9da173b386aa314617fce1bf7bbf2cfee9213e85947c03f48ee354a90dcf165cb13c7033455023dcc1b467d1abf11c6be833631a88e5491a7a39d002c56875bde15a612b4994ec9f165c0a840aff4f3b9659", @ANYRES32=r3, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x20040004}, 0x8000) sendto$inet(r2, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0xf000) sendfile(r5, r6, 0x0, 0xf03b0000) sendfile(r5, r4, 0x0, 0x8000000000004) setsockopt$SO_J1939_SEND_PRIO(r4, 0x6b, 0x3, &(0x7f0000000080)=0x6, 0x4) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4cc834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffdbe, 0x44070, 0x0, 0x657) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='rdma.current\x00', 0x7a05, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) sendfile(r7, r8, 0x0, 0xf03b0000) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x2}, 0x4) 20:36:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x322, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:36:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x322, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:36:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x33c, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:36:02 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x28a, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:36:02 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{0x0}], 0x1}, 0x0) 20:36:02 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r1, 0x10e, 0x3, &(0x7f00007e0000)=""/4, &(0x7f0000000180)=0x4) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x4, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x0) 20:36:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x33c, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:36:02 executing program 5: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) getsockopt$inet_mreq(r1, 0x0, 0x20, &(0x7f00000001c0)={@multicast1, @dev}, &(0x7f0000000240)=0x8) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @bcast}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r3, r2, 0x0, 0x8000000000004) getsockopt$inet6_buf(r3, 0x29, 0x2b, &(0x7f00000000c0)=""/148, &(0x7f0000000000)=0x94) 20:36:02 executing program 0: syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x8000000000004) accept4$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c, 0x800) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r3, &(0x7f0000000080)=@short={0xb, @dev, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) bind$rose(r3, 0x0, 0x0) connect$rose(r3, &(0x7f00000000c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @bcast}, 0x1c) 20:36:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x34a, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4"], 0x50}}, 0x0) 20:36:02 executing program 3: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2c6, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 753.687050][ C0] general protection fault, probably for non-canonical address 0xdffffc0000000066: 0000 [#1] PREEMPT SMP KASAN [ 753.700153][ C0] KASAN: null-ptr-deref in range [0x0000000000000330-0x0000000000000337] [ 753.709362][ C0] CPU: 0 PID: 29692 Comm: syz-executor.1 Not tainted 5.7.0-rc5-syzkaller #0 [ 753.719134][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 753.731001][ C0] RIP: 0010:ax25_send_frame+0xe1/0x660 [ 753.736911][ C0] Code: c6 00 00 48 85 c0 0f 85 0c 04 00 00 e8 48 6b 76 fa 49 8d bc 24 30 03 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 d2 04 00 00 49 8b 84 24 30 03 00 00 48 85 c0 48 [ 753.759523][ C0] RSP: 0018:ffffc90000007af8 EFLAGS: 00010206 [ 753.766570][ C0] RAX: dffffc0000000000 RBX: ffff8880a6c73808 RCX: 1ffffffff186fa8e [ 753.775134][ C0] RDX: 0000000000000066 RSI: ffffffff86fcc938 RDI: 0000000000000330 [ 753.783870][ C0] RBP: ffffffff8d22d740 R08: 0000000000000001 R09: fffffbfff185df5e [ 753.793170][ C0] R10: ffffffff8c2efaef R11: fffffbfff185df5d R12: 0000000000000000 [ 753.802040][ C0] R13: 0000000000000104 R14: 0000000000000000 R15: ffff8880a4180400 [ 753.810871][ C0] FS: 00007f34e104a700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 753.820953][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 753.827821][ C0] CR2: 0000001b2fd27000 CR3: 0000000091131000 CR4: 00000000001406f0 [ 753.836994][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 753.847497][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 753.856353][ C0] Call Trace: [ 753.859647][ C0] [ 753.862759][ C0] ? ax25cmp+0x132/0x180 [ 753.867376][ C0] rose_send_frame+0xcc/0x2f0 [ 753.872200][ C0] rose_transmit_clear_request+0x1de/0x290 [ 753.878528][ C0] ? lockdep_hardirqs_on+0x196/0x620 [ 753.884266][ C0] rose_rx_call_request+0x488/0x1960 [ 753.890196][ C0] ? rose_release+0x4f0/0x4f0 [ 753.894913][ C0] rose_loopback_timer+0x15d/0x470 [ 753.900239][ C0] call_timer_fn+0x1ac/0x780 [ 753.905794][ C0] ? rose_link_rx_restart.cold+0xa3/0xa3 [ 753.911845][ C0] ? timer_fixup_init+0x60/0x60 [ 753.918021][ C0] ? lock_downgrade+0x840/0x840 [ 753.923262][ C0] ? mark_held_locks+0x9f/0xe0 [ 753.928303][ C0] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 753.934474][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 753.940127][ C0] ? rose_link_rx_restart.cold+0xa3/0xa3 [ 753.946234][ C0] run_timer_softirq+0x623/0x1600 [ 753.951561][ C0] ? add_timer+0x830/0x830 [ 753.956619][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 753.962534][ C0] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 753.969500][ C0] ? mark_held_locks+0x9f/0xe0 [ 753.975193][ C0] __do_softirq+0x26c/0x9f7 [ 753.979881][ C0] do_softirq_own_stack+0x2a/0x40 [ 753.985252][ C0] [ 753.988275][ C0] ? __ipv6_dev_mc_inc+0x811/0xca0 [ 753.993949][ C0] do_softirq.part.0+0x10f/0x160 [ 753.999388][ C0] __local_bh_enable_ip+0x20e/0x270 [ 754.004778][ C0] __ipv6_dev_mc_inc+0x811/0xca0 [ 754.010297][ C0] ipv6_add_dev+0xa3d/0x10b0 [ 754.015098][ C0] addrconf_notify+0x960/0x2310 [ 754.020048][ C0] ? lock_downgrade+0x840/0x840 [ 754.024974][ C0] ? tls_dev_event+0x100/0xc60 [ 754.031091][ C0] ? mark_held_locks+0x9f/0xe0 [ 754.036732][ C0] ? inet6_ifinfo_notify+0x150/0x150 [ 754.042797][ C0] ? clusterip_netdev_event+0x465/0x640 [ 754.048540][ C0] ? __local_bh_enable_ip+0x159/0x270 [ 754.054018][ C0] ? clusterip_netdev_event+0x465/0x640 [ 754.060049][ C0] ? tee_netdev_event+0x431/0x5d0 [ 754.065099][ C0] ? ip6mr_device_event+0x1ab/0x220 [ 754.070580][ C0] ? notifier_call_chain+0xc0/0x230 [ 754.077066][ C0] notifier_call_chain+0xc0/0x230 [ 754.082285][ C0] call_netdevice_notifiers_info+0xb5/0x130 [ 754.088542][ C0] register_netdevice+0xd70/0x10b0 [ 754.093679][ C0] ? netdev_change_features+0xb0/0xb0 [ 754.100462][ C0] ? macsec_start_xmit+0x22e0/0x22e0 [ 754.106036][ C0] macsec_newlink+0x408/0x1320 [ 754.111300][ C0] ? macsec_dellink+0x230/0x230 [ 754.116803][ C0] ? xdp_rxq_info_reg+0x111/0x1b0 [ 754.122243][ C0] ? alloc_netdev_mqs+0xa1d/0xde0 [ 754.127727][ C0] ? rtnl_create_link+0x184/0xac0 [ 754.132947][ C0] ? macsec_dellink+0x230/0x230 [ 754.138150][ C0] __rtnl_newlink+0xf18/0x1590 [ 754.143279][ C0] ? rtnl_link_unregister+0x240/0x240 [ 754.149313][ C0] ? is_bpf_text_address+0xcb/0x160 [ 754.155077][ C0] ? kernel_text_address+0x6e/0xe0 [ 754.161394][ C0] ? __kernel_text_address+0x9/0x30 [ 754.167351][ C0] ? unwind_get_return_address+0x5a/0xa0 [ 754.173786][ C0] ? profile_setup.cold+0xc1/0xc1 [ 754.179089][ C0] ? arch_stack_walk+0x97/0xf0 [ 754.184060][ C0] ? stack_trace_save+0x8c/0xc0 [ 754.189315][ C0] ? stack_trace_consume_entry+0x160/0x160 [ 754.195343][ C0] ? rtnl_newlink+0x46/0xa0 [ 754.200444][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 754.206474][ C0] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 754.212998][ C0] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 754.219791][ C0] rtnl_newlink+0x64/0xa0 [ 754.224223][ C0] ? __rtnl_newlink+0x1590/0x1590 [ 754.229703][ C0] rtnetlink_rcv_msg+0x44e/0xad0 [ 754.234971][ C0] ? rtnl_bridge_getlink+0x870/0x870 [ 754.240373][ C0] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 754.246145][ C0] ? __copy_skb_header+0x270/0x5b0 [ 754.251542][ C0] ? skb_splice_bits+0x1a0/0x1a0 [ 754.256741][ C0] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 754.262777][ C0] ? kmem_cache_alloc+0x261/0x740 [ 754.268043][ C0] netlink_rcv_skb+0x15a/0x410 [ 754.273061][ C0] ? rtnl_bridge_getlink+0x870/0x870 [ 754.279579][ C0] ? netlink_ack+0xa10/0xa10 [ 754.284377][ C0] netlink_unicast+0x537/0x740 [ 754.291404][ C0] ? netlink_attachskb+0x810/0x810 [ 754.297033][ C0] ? _copy_from_iter_full+0x25c/0x870 [ 754.302508][ C0] ? __phys_addr_symbol+0x2c/0x70 [ 754.307663][ C0] ? __check_object_size+0x171/0x437 [ 754.313323][ C0] netlink_sendmsg+0x882/0xe10 [ 754.318365][ C0] ? aa_af_perm+0x260/0x260 [ 754.323998][ C0] ? netlink_unicast+0x740/0x740 [ 754.329827][ C0] ? netlink_unicast+0x740/0x740 [ 754.335024][ C0] sock_sendmsg+0xcf/0x120 [ 754.339633][ C0] ____sys_sendmsg+0x6bf/0x7e0 [ 754.344668][ C0] ? kernel_sendmsg+0x50/0x50 [ 754.349940][ C0] ___sys_sendmsg+0x100/0x170 [ 754.354818][ C0] ? sendmsg_copy_msghdr+0x70/0x70 [ 754.360983][ C0] ? __fget_files+0x32f/0x500 [ 754.366120][ C0] ? ksys_dup3+0x3c0/0x3c0 [ 754.370657][ C0] ? __fget_light+0x20e/0x270 [ 754.375605][ C0] __sys_sendmsg+0xec/0x1b0 [ 754.380388][ C0] ? __sys_sendmsg_sock+0xb0/0xb0 [ 754.385434][ C0] ? __x64_sys_futex+0x380/0x4f0 [ 754.390556][ C0] ? trace_hardirqs_off_caller+0x55/0x230 [ 754.396792][ C0] ? do_syscall_64+0x21/0x7d0 [ 754.401480][ C0] do_syscall_64+0xf6/0x7d0 [ 754.406482][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 754.412381][ C0] RIP: 0033:0x45ca29 [ 754.416380][ C0] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 754.436823][ C0] RSP: 002b:00007f34e1049c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 754.445461][ C0] RAX: ffffffffffffffda RBX: 0000000000500f40 RCX: 000000000045ca29 [ 754.453734][ C0] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 754.462095][ C0] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 754.470193][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 754.478693][ C0] R13: 0000000000000a04 R14: 00000000004ccdcc R15: 00007f34e104a6d4 [ 754.486889][ C0] Modules linked in: [ 754.491160][ C0] ---[ end trace 7e642dfbff71cb96 ]--- [ 754.497808][ C0] RIP: 0010:ax25_send_frame+0xe1/0x660 [ 754.503605][ C0] Code: c6 00 00 48 85 c0 0f 85 0c 04 00 00 e8 48 6b 76 fa 49 8d bc 24 30 03 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 d2 04 00 00 49 8b 84 24 30 03 00 00 48 85 c0 48 [ 754.524259][ C0] RSP: 0018:ffffc90000007af8 EFLAGS: 00010206 [ 754.531515][ C0] RAX: dffffc0000000000 RBX: ffff8880a6c73808 RCX: 1ffffffff186fa8e 20:36:03 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="1800000003000000000000000000000095002b0000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3b010000}}], 0x500, 0x5010012, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{0x0}], 0x1}, 0x0) 20:36:03 executing program 4: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x124, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100003077474fa14dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7ffd0002810700001c0012000b0001006d616373656300e10b00020005000b00010000000a00054037000000fffe084808000a0009d35b587e27a8b0b9cad4", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 754.539936][ C0] RDX: 0000000000000066 RSI: ffffffff86fcc938 RDI: 0000000000000330 [ 754.548506][ C0] RBP: ffffffff8d22d740 R08: 0000000000000001 R09: fffffbfff185df5e [ 754.557581][ C0] R10: ffffffff8c2efaef R11: fffffbfff185df5d R12: 0000000000000000 [ 754.566362][ C0] R13: 0000000000000104 R14: 0000000000000000 R15: ffff8880a4180400 [ 754.574878][ C0] FS: 00007f34e104a700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 754.584309][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 754.591382][ C0] CR2: 0000001b2fd27000 CR3: 0000000091131000 CR4: 00000000001406f0 [ 754.599849][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 754.608956][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 754.618016][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 754.628329][ C0] Kernel Offset: disabled [ 754.632845][ C0] Rebooting in 86400 seconds..