RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2214.467676][ T8376] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:01 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x7000000}, 0x0) 01:54:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x7a}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:01 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0xc) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0xc) (async) shutdown(r0, 0x1) (async) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) 01:54:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x2, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2214.702568][ T8383] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:01 executing program 1: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x10, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x104d}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2214.991790][ T8389] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:01 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x2, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:01 executing program 1: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x10, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2215.174753][ T8397] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:01 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0xc) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0xc) (async) shutdown(r0, 0x1) (async) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) 01:54:01 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x8000000}, 0x0) 01:54:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfc}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1100}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:02 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x2, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2215.531943][ T8407] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2215.608303][ T8409] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:02 executing program 1: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x10, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r0}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x300}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:02 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x9000000}, 0x0) 01:54:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1200}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:02 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x2, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2216.030153][ T8414] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2216.045311][ T8419] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:02 executing program 1: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x10, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r0}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:02 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0xa000000}, 0x0) 01:54:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2439}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x500}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2216.506014][ T8428] validate_nla: 14 callbacks suppressed [ 2216.506081][ T8428] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2216.522368][ T8428] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2216.534739][ T8430] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2216.543401][ T8430] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:03 executing program 0: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x2, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r0}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:03 executing program 1: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x10, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r0}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0xb000000}, 0x0) 01:54:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x600}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x243b}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0xc000000}, 0x0) [ 2217.020040][ T8440] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2217.028483][ T8440] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2217.059838][ T8439] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2217.068296][ T8439] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:03 executing program 0: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x2, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r0}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:03 executing program 1: socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x10, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r0}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x700}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2500}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:04 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0xd000000}, 0x0) [ 2217.488795][ T8448] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2217.497818][ T8448] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:04 executing program 0: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x2, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r0}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:04 executing program 1: socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x10, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r0}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:04 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0xc) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x0, 0x0) sync_file_range(r1, 0x0, 0x0, 0x1) fstat(r0, &(0x7f0000003f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003f80)={0x0, 0x0, 0x0}, &(0x7f0000003fc0)=0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002c80)={0x48, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x0, 0x3a}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x48}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004440)={0x3c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x3c}}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000004440)={0x0, 0x0}) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004440)={0x3c, r14, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r15}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000004480)={0xffffffffffffffff}) r17 = open$dir(&(0x7f00000044c0)='./file0\x00', 0x420000, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004580)=[{{&(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000001540)=[{&(0x7f0000000340)="2115d8ceff96374e9d24046b25a4c208a4f07e2593da4800d445ab6c2e1730aca1883a3279ee87c03a32a757bec1ab84a16f6d98391953c35aa56beddcf1be310e93d701ad40c40f5dacfb3c433143ee241589cba8c19359bbabeb4f35ead224940df0e4249ca8b05e64fe374d48f3a1ccb7e898284e3be3d8be5f4587de022ed42a21bb6e1e35423367217864f009b9aabe24fe3d40049d9e5937fb0a08844c1612a995bbeb3f3b2dfe686a6a90933b020ca93a5143206a261c2528c8d02d5fcd92f7874eada72c90abf06a0e2c7c7f1711b8e35e4867d4a6225d26", 0xdc}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="8cfcad146a4992a29b9066e4b91a09260fe8af3fc357afd319a52e717cb8ca3d812db6b41f2b1d11b9aa2c8503657d2b86d8922a4365fd66e2dbef8fa2f6010fae0772d7496ea3aff040773e75c848f3acbb59ee048fa7be89fce84aef9c75bb1a1607686cd03704556ad3c91a66ac2d4c7c360608e1d3c947dc721f44b253b95daad6002816dedd1e08c1867887a9b7f3cc1b84ac141685af54173284c22df146a72121ab3ad5f8b5b72aa66acd8dcb83d1330370bdc8894ccd7b1fdfc4dab0623d5f810dd600fe161312e172874846635e9e31d90c0702a88d57bdf0", 0xdd}], 0x3, &(0x7f00000015c0)=[@rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @rights={{0x1c, 0x1, 0x1, [r0, r1, r0]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}], 0xc0, 0x8000}}, {{&(0x7f0000001680)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002940)=[{&(0x7f0000001700)="792ca9f0566685244d9e7bce03c7ee020dffd28fe312cc32b0b95b05c6131b1c3bfb63724caed42c", 0x28}, {&(0x7f0000001740)="12bed18942b268c5f9e7b7113a604a5f63ae26bdc4ea19ace73076c1752d00547add17eeafd31c9dd26673d5cecc9b4020dc1f882c42aa119ddf", 0x3a}, {&(0x7f0000001780)="0c9c422771a6ecfd1c50f7192da713e5816549b5b21482c1898d4dfa0e2570f6b6b5c0bf018fdbb49ccda73057364ca90f3f96b5fe5bc9e9bebd707326331e0c4fdc615981c295de246b2d6453986c41977e5f8f5881fe2310a93bacf4d8cfc5d4969953b41a6e02ca640f7262c4f108c2860723230584a7fb6018160a33bbf99ff71872100e3fb8c161b3c0ac1d06714704bb43cdca498893d13605bb092cb0df3b35acfc99f38465847b9b941e9c9e832f94a2e770f1725ca00875bce26d6449268b6661b55fdd356c3119abcd1de514f4038fdcbf8bbf55895c88c16f2e89eed8bd5670f695212da51c8bfc01", 0xee}, {&(0x7f0000001880)="67efc2bdc81e11ec9ecfa665c56fd7ee2eae00edf1cd852572846b7f4af77b6e401784b72647e93fecdebfbfa958fc75d568926f1522b556189090bbb3b9d07b1757cbc0e9edae5823b5d2a0a2d3ae6031300e8817dbb6ed156c32aacb09b02297017773eabcaeeda5fd2cee355de8a489a472a81bcb093bead7dcbb7ac0ffc011f9269c5c1d75c8b84a8435feced6eaec565b671190b3382a6544ac30c9dd92bd75ec97", 0xa4}, {&(0x7f0000001940)="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", 0x1000}], 0x5, &(0x7f00000029c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r1, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x40, 0x24004801}}, {{&(0x7f0000002a00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002c40)=[{&(0x7f0000002a80)="bed9a795aa28f990dd046b6fa5b10404abce2031c6147b8176291ce43db5721ff15a9d039a7132adea9d40a0b11223c90ba33551e924ccfbfe6b5c11145a1ac799858193f3e4657d789cffb3d6362b6d1ffed0be222107d162330d9f95f5e64c98f3ab5878675c384cb7dc4051d778dfccb5393a973af2bdb15d38c3eae4d5c01764c645543c42c0c37dd5d0c728c193563a21a2ab8e02b8e9bfad5973fdea85cae7dd037d6efefb81eb2844da3c32a3ffc9b052105aa39da17e2005a959698d0d559cbe224fd73ab446bbdf214fb6b72a6a75120d5989e274df8227", 0xdc}, {&(0x7f0000002b80)="3459730abea3cf9cd6bf0e5595646c83d271638430a988232a95b41eae286325f7dd02044adb558bcc7b6e67bdd04977c74d09118a0c910684d02ee51f16d5a868e4bc77fa023a7f0b85391891e49f61736e412b85cd4638aa8438c5c7c43ef890573083d33c877d4984806aa391d2dd89a2b2", 0x73}, {&(0x7f0000002c00)="1509b7d3b5311253ed1b792b8792e3af6ec78fb0e8fcaebf1f224440d77abfcfc1f7e9cdc8f0aca966", 0x29}], 0x3, &(0x7f0000003300)=ANY=[@ANYBLOB="100000000000000001000000010000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="02000000cd32b5275879ee6b4c998ddd38b5deace61125c20d18b51ed6b3c9dceb1666af43ed5a4835c0554787811cac5a92"], 0x30, 0x4048810}}, {{&(0x7f0000002d00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002fc0)=[{&(0x7f0000002d80)="5d7ffb9ddb9e5b20d2b18f53827998130c33e122959a90d4721d25", 0x1b}, {&(0x7f0000002dc0)="8ca1c7e69ca4cb719462fa99f4e16d8dd1944e8c467b9108b3ceec1731dd8d43428f1f53b06b522e9188d93ff80f6673365f5498c520c3ee1742d5956a58108b552bdd1dca2db345e0f5aa0a3e5b9388b6e3699956530310b65b3178ec41afc9721f1029fc6e5e89c2efb8695a8d03162c81b4bd79f5373909aaf90a47c474333099bf7964db5fa2af9b6249484a1523a5e6bc3e24d7c357f1c7474bb858", 0x9e}, {&(0x7f0000002e80)="3eb8cccc3a64313e149fddda1530016ee2860d68a1bfcd3034a48ad92cebaf5417239ca60c5650a989a5f04574f1b0ce57979418fe888d343f9c3e2ea1ac62458a5cac72cfe827647b5cd360cb35bea6e0d23abf4c75537d27d50bec278d74364a7044f6cb066b5ba73938637984245f501e9cb664cd8c04eb9d1b3b9f707045bb54fce5b9787b8e7eb5ca1aaf4c8c3ec47b48988ba885d291528a9108690a10d8dd749e6e7a2d7b259771538da7e8c6097298fceb7c6afd0b5f1f1d4cb41c6a2bc2ebc14a19764410ce3b3790104ba0312e65be60dae15b33523d9904152740c235d26ca2595c31e7acfe55221affff", 0xf0}, {&(0x7f0000002f80)="363424d76afca573d454db1ba77614a25d3bad6bc0d684bf46ba9376367677d15eb1d9c5a5ad56", 0x27}], 0x4, &(0x7f0000003040)=[@rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}], 0x38, 0x4810}}, {{&(0x7f0000003080)=@file={0x395ad04d9af3585f, './file0\x00'}, 0x6e, &(0x7f00000032c0)=[{&(0x7f0000003100)="c42ef4a6a6454c44f2436c7200fe0cbe96ffc8cbc917efc9a3cc462c79a1f9d7b15798b650971121b66a2774c97bfdee3e9fc472799fba8ae4696aeb7fd7d5fa8d4f89a052f0608f1316dc99423dc6add1e345e9a28ee138cde6d66f59d30967e1e53059463deade506498e8607ecac5c0e4ecaab8f83000cdd28a36e5501e0da1f1d98b03", 0x85}, {&(0x7f00000031c0)="a6de982c43d00b48a531113b5bdfd989dfcdac1e26ccc6f8c5f4714640ad39fa3e77f872dc64afccfbe97e56cba46959070daf35520bb6380aa18e82d4d4321c16bfba33c0cf1152a8ffb5231bdb8fc963b94441f5a2a979d8b62cf8255fa1515c2f3f49f5302326c3145df7435a665c6216a6b9fb4d91e75ce7bbbdcba31a61cdd7d40f21a5b4faf74552bcecfd6d84d867a9160ff024a2083fc511f1661a2e0a7ec8c771d5f1838c181585c0477cc889262ea632d35ad7ca70280c5978db1ec1a2ef003de1637b862e69e07c942a86ada54933", 0xd4}], 0x2, &(0x7f0000003380)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x70, 0x20008804}}, {{&(0x7f0000003400)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003640)=[{&(0x7f0000003480)="bf0b549641531527d8b6b8d8881db0dae6ea4f21d850c8913f704b2506549ab991a6317b9e219c28700b662c1e4497dc5bb6bead3497176177229113b679eca398ab7529a33f0dd41350c62fa3858dbf30303028c09d73c6bfb5d8499d21b9c2666810785434ecf1978425b6bd8088e0396df0007d6722d9144e34e6813efd3e364b16d3092d76c470ad629df22ded4bdfe4324ce06ce2690407f9cc407725ac775f4b38b298757f077e1997c568e2a29290d272859ebea8567cd5192d249f6a16bc1e9b133f71111038f31232140f3cce8cc80428e4879bf1", 0xd9}, {&(0x7f0000003580)="a4a56e5ebe2d275a6d", 0x9}, {&(0x7f00000035c0)}, {&(0x7f0000003600)="459c33598c07fa74fb250b496e412f33fb9a4ec4f860d6aee0", 0x19}], 0x4, &(0x7f0000003680), 0x0, 0x80008}}, {{&(0x7f00000036c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000003940)=[{&(0x7f0000003740)="8d43d935fb33c40699b6bfa0fc17ab212cfb10185d168e10a74fea8509340d4fd6039188133b67590d3382a687f7d2d73ca000e30ac06ae42600c67e6d06806b7538c9daeea3c75c777cb100fcd1bbc14e7829d52ce85f35edadb13f4581f5f9a1df79c0982b9066fcdcfdbf8dbf456f004e28a803204ed0b87d88d20893535b25943ba4739c63288e8cd621291e19ba47e125a72994c1ca599217c9a9de137500f815dfec233e69bb094a1f8122e955054821ee0c15e522bea5971f3152cda62394eb62e1ca5950aef256a4b8d0a96bff8826d1fee90690a5f4cc83a5a92fc59d8024982df89831e0", 0xe9}, {&(0x7f0000003840)="9a96845d4f9fc4e2858c6fdc40d8d0be6d14fe3a2f1b08f809b644fa44521d89e6160356d549494d7e72e0c00c2684b00a052da2da0e31fd4a043aa7213cef19f2246bd04200413feaa63b311bc40d42b1db8e132b51c8d99ac299f302d6daad69bc2759bb3eca084a3ac8ceb0113642a62d4d59e2eaa099e192147d7984890df6042f2991b941f0e2293e46e0e980966a03e9e8ae0d233bf9c950f1", 0x9c}, {&(0x7f0000003900)="b80238bb14f9985bfa5a4be6004a484e3c8939966dee33d3bc2b4f4a7f4ae17250369ade91dd22d1292d200ac0a7b848806a97f6f2837c0c929c6eb2d7", 0x3d}], 0x3, &(0x7f0000003a80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [r0, r0, r0, r1, r1, 0xffffffffffffffff, 0xffffffffffffffff, r1, r1, r1]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x128, 0x8000}}, {{&(0x7f0000003bc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003ec0)=[{&(0x7f0000003c40)="79c57ce20f802bb8bca5b3af3ac26c3a26840ab5df9276311fab8f8057aaa0bad0a15dd936f5ed6ced45b11f471c5c89e65227daa55deac7f010f52bdafe8e5efcfff504e69fd7ad", 0x48}, {&(0x7f0000003cc0)="fcc67e89170cb2704e83e2de331a41950845e724ca8a3c215aa79609f5587acde5fa5798a552be5542924b8c198683140bec97015565aee17793b661a1da090ff1be29e412b0fd09630d197fab079358da46ba7eb7128c929722e8574004a9b17a029debced64927d0557ab1aa0d64119b6d36d514b9304ef339a6e99a76d2593ef8537ac99d9869", 0x88}, {&(0x7f0000003d80)="bed960c52d97dcdb20993127ff33893c1c8ee9df67db6baf18c0d10c04f2388fcc41a11c3044c21e510b1aacd23f2670244eaa0c98236acd223c03c34df14a8517ac419c2b27a8c82d00f3177eb3d34953bb90d7e685f9de85c49f5f3dbcd2afa09b4bb94505372126a89fab973cd766285a9d65b0345343f67a4d6213ec8bd200520d2cdb2d18f0c474f850549c0fca5e9bcf161146e64e68295f0c084528e353a3e81405643afcbe9ed14328d8f3ef91e08d1c9c61b464d195322abb8229a5a663eb2db8418c4c", 0xc8}, {&(0x7f0000003e80)="210a03aecd6243dc928ab18c1b6a601d570ae065be62168bb1f72192085e359b25c821a5260e52dc16197a794d3391626f2792e074", 0x35}], 0x4, &(0x7f0000004000)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r2}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r4, r5}}}, @rights={{0x1c, 0x1, 0x1, [r0, r6, r9]}}, @rights={{0x10}}], 0x90, 0x20040004}}, {{&(0x7f00000040c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000004400)=[{&(0x7f0000004140)="5f262a8a6b59e1e6b2195822441162a1738fdf7991bd3c4e19f0e093435910d6e9bf513ce697196e9ba7d68f0ece948c0b0905b269e6bd34ac6cce33a8aed39ea823cbfb1752dc1d27520a8f21762e59122ee217331e6416673479f1b949197f1d8972a13b989736a98e25a2385a420aab243609aa9d8aee88185c9331184f7a382cd5da76739451657cc652498737380eb23d950ebc4c77cd93d666919dc32d4e042a56052d0e7bd61655fba15042b51ad75520e68c3e18e64463a79117363887c3a2f06871fa0f2b7c787b67dee9cf55b6a283fa38a0dfd4a33320f1cb2588283c0ce7f3", 0xe5}, {&(0x7f0000004240)="90bb72fc7e33080e51962aa1696b4cb3795163867b30c3ee13af150391cd0c8bbf65fa64df7b307b2c704e2982922b13c1b450fef42f3526cc41744b8c1c411724374b6009351767822367531d1bd69ed7ff690bc35271658af9934f04fa7a84b19b5f39a569b7271a6d7d5e61e402e406d406ea21d0d2cfc506eb7cfac0384953919dcc767ea954fe1cd03e1605cba9ad56e7f41c1efd2c449be7850d65451a8f48602dda6d24d898dd6341abd405e235d39d66ec3f5519", 0xb8}, {&(0x7f0000004300)="4f0ccf68712ae20fc8be9f81516e9ef7806d7085896257c47394c5013f965ad5f9cfb035b318f07cde5b12e9105c362e966e1fd47fdbfedc1454c2c55441972ac788d6f402509b870e0a5e4c01c936e0152d347ff32a65758a041715665d2840273d32e36454ebe6d86dda9f3439d98c84d3436630b06ac9fd57e0cd3ebda466ea0e9b90b2e66233191853e1d019294d7f6fcd0ff5480831d78319ab0f73d95fee637aa69fd6a4f3c87b6d02a56b0692bd4a7c161d51cde11826a14e174d45f8e8b743", 0xc3}], 0x3, &(0x7f0000004500)=[@cred={{0x1c, 0x1, 0x2, {r12, 0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [r1, r13, r16]}}, @rights={{0x1c, 0x1, 0x1, [r17, r1, r1]}}], 0x60, 0x841}}], 0x9, 0x20040054) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000080)={0x0, 0x85, "0f634ff81b05e7c10b8046ff4c9c426471e3a7a4b8d0b422527ca19ecaef316e13e55b685cb28f82b6c560264253fabbd3680d578ab7c366177d1fd6bc265a867f4a8c096b74b8bd5e56a8cdafba51a6a7c448e1314c5ab85e22e3ab13142dc3d81f97482607e90e04cef85759fee9d40b07ff9816dae7adb0024529aad8ca9e905b6b0a0e"}, &(0x7f0000000140)=0x8d) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000180)={r18, @in={{0x2, 0x4e20, @local}}, [0x8, 0xd97, 0x8, 0x8000000000000001, 0x81, 0x268000000000, 0x8000, 0x6, 0x8, 0x6, 0x9, 0x9, 0x0, 0x68, 0x80000000]}, &(0x7f0000000280)=0x100) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040)=0x8, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) [ 2217.714831][ T8451] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2217.727421][ T8451] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x900}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3924}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:04 executing program 0: socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x2, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r0}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:04 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0xe000000}, 0x0) 01:54:04 executing program 1: socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x10, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r0}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2218.017613][ T8460] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2218.030701][ T8460] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:04 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0xc) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x0, 0x0) sync_file_range(r1, 0x0, 0x0, 0x1) fstat(r0, &(0x7f0000003f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003f80)={0x0, 0x0, 0x0}, &(0x7f0000003fc0)=0xc) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002c80)={0x48, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x0, 0x3a}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x48}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004440)={0x3c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x3c}}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000004440)={0x0, 0x0}) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) (async) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004440)={0x3c, r14, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r15}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000004480)={0xffffffffffffffff}) (async) r17 = open$dir(&(0x7f00000044c0)='./file0\x00', 0x420000, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004580)=[{{&(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000001540)=[{&(0x7f0000000340)="2115d8ceff96374e9d24046b25a4c208a4f07e2593da4800d445ab6c2e1730aca1883a3279ee87c03a32a757bec1ab84a16f6d98391953c35aa56beddcf1be310e93d701ad40c40f5dacfb3c433143ee241589cba8c19359bbabeb4f35ead224940df0e4249ca8b05e64fe374d48f3a1ccb7e898284e3be3d8be5f4587de022ed42a21bb6e1e35423367217864f009b9aabe24fe3d40049d9e5937fb0a08844c1612a995bbeb3f3b2dfe686a6a90933b020ca93a5143206a261c2528c8d02d5fcd92f7874eada72c90abf06a0e2c7c7f1711b8e35e4867d4a6225d26", 0xdc}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="8cfcad146a4992a29b9066e4b91a09260fe8af3fc357afd319a52e717cb8ca3d812db6b41f2b1d11b9aa2c8503657d2b86d8922a4365fd66e2dbef8fa2f6010fae0772d7496ea3aff040773e75c848f3acbb59ee048fa7be89fce84aef9c75bb1a1607686cd03704556ad3c91a66ac2d4c7c360608e1d3c947dc721f44b253b95daad6002816dedd1e08c1867887a9b7f3cc1b84ac141685af54173284c22df146a72121ab3ad5f8b5b72aa66acd8dcb83d1330370bdc8894ccd7b1fdfc4dab0623d5f810dd600fe161312e172874846635e9e31d90c0702a88d57bdf0", 0xdd}], 0x3, &(0x7f00000015c0)=[@rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @rights={{0x1c, 0x1, 0x1, [r0, r1, r0]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}], 0xc0, 0x8000}}, {{&(0x7f0000001680)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002940)=[{&(0x7f0000001700)="792ca9f0566685244d9e7bce03c7ee020dffd28fe312cc32b0b95b05c6131b1c3bfb63724caed42c", 0x28}, {&(0x7f0000001740)="12bed18942b268c5f9e7b7113a604a5f63ae26bdc4ea19ace73076c1752d00547add17eeafd31c9dd26673d5cecc9b4020dc1f882c42aa119ddf", 0x3a}, {&(0x7f0000001780)="0c9c422771a6ecfd1c50f7192da713e5816549b5b21482c1898d4dfa0e2570f6b6b5c0bf018fdbb49ccda73057364ca90f3f96b5fe5bc9e9bebd707326331e0c4fdc615981c295de246b2d6453986c41977e5f8f5881fe2310a93bacf4d8cfc5d4969953b41a6e02ca640f7262c4f108c2860723230584a7fb6018160a33bbf99ff71872100e3fb8c161b3c0ac1d06714704bb43cdca498893d13605bb092cb0df3b35acfc99f38465847b9b941e9c9e832f94a2e770f1725ca00875bce26d6449268b6661b55fdd356c3119abcd1de514f4038fdcbf8bbf55895c88c16f2e89eed8bd5670f695212da51c8bfc01", 0xee}, {&(0x7f0000001880)="67efc2bdc81e11ec9ecfa665c56fd7ee2eae00edf1cd852572846b7f4af77b6e401784b72647e93fecdebfbfa958fc75d568926f1522b556189090bbb3b9d07b1757cbc0e9edae5823b5d2a0a2d3ae6031300e8817dbb6ed156c32aacb09b02297017773eabcaeeda5fd2cee355de8a489a472a81bcb093bead7dcbb7ac0ffc011f9269c5c1d75c8b84a8435feced6eaec565b671190b3382a6544ac30c9dd92bd75ec97", 0xa4}, {&(0x7f0000001940)="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", 0x1000}], 0x5, &(0x7f00000029c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r1, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x40, 0x24004801}}, {{&(0x7f0000002a00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002c40)=[{&(0x7f0000002a80)="bed9a795aa28f990dd046b6fa5b10404abce2031c6147b8176291ce43db5721ff15a9d039a7132adea9d40a0b11223c90ba33551e924ccfbfe6b5c11145a1ac799858193f3e4657d789cffb3d6362b6d1ffed0be222107d162330d9f95f5e64c98f3ab5878675c384cb7dc4051d778dfccb5393a973af2bdb15d38c3eae4d5c01764c645543c42c0c37dd5d0c728c193563a21a2ab8e02b8e9bfad5973fdea85cae7dd037d6efefb81eb2844da3c32a3ffc9b052105aa39da17e2005a959698d0d559cbe224fd73ab446bbdf214fb6b72a6a75120d5989e274df8227", 0xdc}, {&(0x7f0000002b80)="3459730abea3cf9cd6bf0e5595646c83d271638430a988232a95b41eae286325f7dd02044adb558bcc7b6e67bdd04977c74d09118a0c910684d02ee51f16d5a868e4bc77fa023a7f0b85391891e49f61736e412b85cd4638aa8438c5c7c43ef890573083d33c877d4984806aa391d2dd89a2b2", 0x73}, {&(0x7f0000002c00)="1509b7d3b5311253ed1b792b8792e3af6ec78fb0e8fcaebf1f224440d77abfcfc1f7e9cdc8f0aca966", 0x29}], 0x3, &(0x7f0000003300)=ANY=[@ANYBLOB="100000000000000001000000010000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="02000000cd32b5275879ee6b4c998ddd38b5deace61125c20d18b51ed6b3c9dceb1666af43ed5a4835c0554787811cac5a92"], 0x30, 0x4048810}}, {{&(0x7f0000002d00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002fc0)=[{&(0x7f0000002d80)="5d7ffb9ddb9e5b20d2b18f53827998130c33e122959a90d4721d25", 0x1b}, {&(0x7f0000002dc0)="8ca1c7e69ca4cb719462fa99f4e16d8dd1944e8c467b9108b3ceec1731dd8d43428f1f53b06b522e9188d93ff80f6673365f5498c520c3ee1742d5956a58108b552bdd1dca2db345e0f5aa0a3e5b9388b6e3699956530310b65b3178ec41afc9721f1029fc6e5e89c2efb8695a8d03162c81b4bd79f5373909aaf90a47c474333099bf7964db5fa2af9b6249484a1523a5e6bc3e24d7c357f1c7474bb858", 0x9e}, {&(0x7f0000002e80)="3eb8cccc3a64313e149fddda1530016ee2860d68a1bfcd3034a48ad92cebaf5417239ca60c5650a989a5f04574f1b0ce57979418fe888d343f9c3e2ea1ac62458a5cac72cfe827647b5cd360cb35bea6e0d23abf4c75537d27d50bec278d74364a7044f6cb066b5ba73938637984245f501e9cb664cd8c04eb9d1b3b9f707045bb54fce5b9787b8e7eb5ca1aaf4c8c3ec47b48988ba885d291528a9108690a10d8dd749e6e7a2d7b259771538da7e8c6097298fceb7c6afd0b5f1f1d4cb41c6a2bc2ebc14a19764410ce3b3790104ba0312e65be60dae15b33523d9904152740c235d26ca2595c31e7acfe55221affff", 0xf0}, {&(0x7f0000002f80)="363424d76afca573d454db1ba77614a25d3bad6bc0d684bf46ba9376367677d15eb1d9c5a5ad56", 0x27}], 0x4, &(0x7f0000003040)=[@rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}], 0x38, 0x4810}}, {{&(0x7f0000003080)=@file={0x395ad04d9af3585f, './file0\x00'}, 0x6e, &(0x7f00000032c0)=[{&(0x7f0000003100)="c42ef4a6a6454c44f2436c7200fe0cbe96ffc8cbc917efc9a3cc462c79a1f9d7b15798b650971121b66a2774c97bfdee3e9fc472799fba8ae4696aeb7fd7d5fa8d4f89a052f0608f1316dc99423dc6add1e345e9a28ee138cde6d66f59d30967e1e53059463deade506498e8607ecac5c0e4ecaab8f83000cdd28a36e5501e0da1f1d98b03", 0x85}, {&(0x7f00000031c0)="a6de982c43d00b48a531113b5bdfd989dfcdac1e26ccc6f8c5f4714640ad39fa3e77f872dc64afccfbe97e56cba46959070daf35520bb6380aa18e82d4d4321c16bfba33c0cf1152a8ffb5231bdb8fc963b94441f5a2a979d8b62cf8255fa1515c2f3f49f5302326c3145df7435a665c6216a6b9fb4d91e75ce7bbbdcba31a61cdd7d40f21a5b4faf74552bcecfd6d84d867a9160ff024a2083fc511f1661a2e0a7ec8c771d5f1838c181585c0477cc889262ea632d35ad7ca70280c5978db1ec1a2ef003de1637b862e69e07c942a86ada54933", 0xd4}], 0x2, &(0x7f0000003380)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x70, 0x20008804}}, {{&(0x7f0000003400)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003640)=[{&(0x7f0000003480)="bf0b549641531527d8b6b8d8881db0dae6ea4f21d850c8913f704b2506549ab991a6317b9e219c28700b662c1e4497dc5bb6bead3497176177229113b679eca398ab7529a33f0dd41350c62fa3858dbf30303028c09d73c6bfb5d8499d21b9c2666810785434ecf1978425b6bd8088e0396df0007d6722d9144e34e6813efd3e364b16d3092d76c470ad629df22ded4bdfe4324ce06ce2690407f9cc407725ac775f4b38b298757f077e1997c568e2a29290d272859ebea8567cd5192d249f6a16bc1e9b133f71111038f31232140f3cce8cc80428e4879bf1", 0xd9}, {&(0x7f0000003580)="a4a56e5ebe2d275a6d", 0x9}, {&(0x7f00000035c0)}, {&(0x7f0000003600)="459c33598c07fa74fb250b496e412f33fb9a4ec4f860d6aee0", 0x19}], 0x4, &(0x7f0000003680), 0x0, 0x80008}}, {{&(0x7f00000036c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000003940)=[{&(0x7f0000003740)="8d43d935fb33c40699b6bfa0fc17ab212cfb10185d168e10a74fea8509340d4fd6039188133b67590d3382a687f7d2d73ca000e30ac06ae42600c67e6d06806b7538c9daeea3c75c777cb100fcd1bbc14e7829d52ce85f35edadb13f4581f5f9a1df79c0982b9066fcdcfdbf8dbf456f004e28a803204ed0b87d88d20893535b25943ba4739c63288e8cd621291e19ba47e125a72994c1ca599217c9a9de137500f815dfec233e69bb094a1f8122e955054821ee0c15e522bea5971f3152cda62394eb62e1ca5950aef256a4b8d0a96bff8826d1fee90690a5f4cc83a5a92fc59d8024982df89831e0", 0xe9}, {&(0x7f0000003840)="9a96845d4f9fc4e2858c6fdc40d8d0be6d14fe3a2f1b08f809b644fa44521d89e6160356d549494d7e72e0c00c2684b00a052da2da0e31fd4a043aa7213cef19f2246bd04200413feaa63b311bc40d42b1db8e132b51c8d99ac299f302d6daad69bc2759bb3eca084a3ac8ceb0113642a62d4d59e2eaa099e192147d7984890df6042f2991b941f0e2293e46e0e980966a03e9e8ae0d233bf9c950f1", 0x9c}, {&(0x7f0000003900)="b80238bb14f9985bfa5a4be6004a484e3c8939966dee33d3bc2b4f4a7f4ae17250369ade91dd22d1292d200ac0a7b848806a97f6f2837c0c929c6eb2d7", 0x3d}], 0x3, &(0x7f0000003a80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [r0, r0, r0, r1, r1, 0xffffffffffffffff, 0xffffffffffffffff, r1, r1, r1]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x128, 0x8000}}, {{&(0x7f0000003bc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003ec0)=[{&(0x7f0000003c40)="79c57ce20f802bb8bca5b3af3ac26c3a26840ab5df9276311fab8f8057aaa0bad0a15dd936f5ed6ced45b11f471c5c89e65227daa55deac7f010f52bdafe8e5efcfff504e69fd7ad", 0x48}, {&(0x7f0000003cc0)="fcc67e89170cb2704e83e2de331a41950845e724ca8a3c215aa79609f5587acde5fa5798a552be5542924b8c198683140bec97015565aee17793b661a1da090ff1be29e412b0fd09630d197fab079358da46ba7eb7128c929722e8574004a9b17a029debced64927d0557ab1aa0d64119b6d36d514b9304ef339a6e99a76d2593ef8537ac99d9869", 0x88}, {&(0x7f0000003d80)="bed960c52d97dcdb20993127ff33893c1c8ee9df67db6baf18c0d10c04f2388fcc41a11c3044c21e510b1aacd23f2670244eaa0c98236acd223c03c34df14a8517ac419c2b27a8c82d00f3177eb3d34953bb90d7e685f9de85c49f5f3dbcd2afa09b4bb94505372126a89fab973cd766285a9d65b0345343f67a4d6213ec8bd200520d2cdb2d18f0c474f850549c0fca5e9bcf161146e64e68295f0c084528e353a3e81405643afcbe9ed14328d8f3ef91e08d1c9c61b464d195322abb8229a5a663eb2db8418c4c", 0xc8}, {&(0x7f0000003e80)="210a03aecd6243dc928ab18c1b6a601d570ae065be62168bb1f72192085e359b25c821a5260e52dc16197a794d3391626f2792e074", 0x35}], 0x4, &(0x7f0000004000)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r2}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r4, r5}}}, @rights={{0x1c, 0x1, 0x1, [r0, r6, r9]}}, @rights={{0x10}}], 0x90, 0x20040004}}, {{&(0x7f00000040c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000004400)=[{&(0x7f0000004140)="5f262a8a6b59e1e6b2195822441162a1738fdf7991bd3c4e19f0e093435910d6e9bf513ce697196e9ba7d68f0ece948c0b0905b269e6bd34ac6cce33a8aed39ea823cbfb1752dc1d27520a8f21762e59122ee217331e6416673479f1b949197f1d8972a13b989736a98e25a2385a420aab243609aa9d8aee88185c9331184f7a382cd5da76739451657cc652498737380eb23d950ebc4c77cd93d666919dc32d4e042a56052d0e7bd61655fba15042b51ad75520e68c3e18e64463a79117363887c3a2f06871fa0f2b7c787b67dee9cf55b6a283fa38a0dfd4a33320f1cb2588283c0ce7f3", 0xe5}, {&(0x7f0000004240)="90bb72fc7e33080e51962aa1696b4cb3795163867b30c3ee13af150391cd0c8bbf65fa64df7b307b2c704e2982922b13c1b450fef42f3526cc41744b8c1c411724374b6009351767822367531d1bd69ed7ff690bc35271658af9934f04fa7a84b19b5f39a569b7271a6d7d5e61e402e406d406ea21d0d2cfc506eb7cfac0384953919dcc767ea954fe1cd03e1605cba9ad56e7f41c1efd2c449be7850d65451a8f48602dda6d24d898dd6341abd405e235d39d66ec3f5519", 0xb8}, {&(0x7f0000004300)="4f0ccf68712ae20fc8be9f81516e9ef7806d7085896257c47394c5013f965ad5f9cfb035b318f07cde5b12e9105c362e966e1fd47fdbfedc1454c2c55441972ac788d6f402509b870e0a5e4c01c936e0152d347ff32a65758a041715665d2840273d32e36454ebe6d86dda9f3439d98c84d3436630b06ac9fd57e0cd3ebda466ea0e9b90b2e66233191853e1d019294d7f6fcd0ff5480831d78319ab0f73d95fee637aa69fd6a4f3c87b6d02a56b0692bd4a7c161d51cde11826a14e174d45f8e8b743", 0xc3}], 0x3, &(0x7f0000004500)=[@cred={{0x1c, 0x1, 0x2, {r12, 0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [r1, r13, r16]}}, @rights={{0x1c, 0x1, 0x1, [r17, r1, r1]}}], 0x60, 0x841}}], 0x9, 0x20040054) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000080)={0x0, 0x85, "0f634ff81b05e7c10b8046ff4c9c426471e3a7a4b8d0b422527ca19ecaef316e13e55b685cb28f82b6c560264253fabbd3680d578ab7c366177d1fd6bc265a867f4a8c096b74b8bd5e56a8cdafba51a6a7c448e1314c5ab85e22e3ab13142dc3d81f97482607e90e04cef85759fee9d40b07ff9816dae7adb0024529aad8ca9e905b6b0a0e"}, &(0x7f0000000140)=0x8d) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000180)={r18, @in={{0x2, 0x4e20, @local}}, [0x8, 0xd97, 0x8, 0x8000000000000001, 0x81, 0x268000000000, 0x8000, 0x6, 0x8, 0x6, 0x9, 0x9, 0x0, 0x68, 0x80000000]}, &(0x7f0000000280)=0x100) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040)=0x8, 0x4) (async) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) [ 2218.244303][ T8466] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2218.252877][ T8466] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xa00}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:04 executing program 0: socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x2, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r0}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x10, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:04 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0xf000000}, 0x0) [ 2218.462955][ T8473] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2218.471854][ T8473] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3b24}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xb00}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2218.790637][ T8482] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2218.800121][ T8482] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:05 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x10, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x10000000}, 0x0) 01:54:05 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0xc) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x0, 0x0) sync_file_range(r1, 0x0, 0x0, 0x1) (async) fstat(r0, &(0x7f0000003f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r3 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0x0) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003f80)={0x0, 0x0, 0x0}, &(0x7f0000003fc0)=0xc) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002c80)={0x48, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x0, 0x3a}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x48}}, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004440)={0x3c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x3c}}, 0x0) (async) fcntl$getownex(r0, 0x10, &(0x7f0000004440)={0x0, 0x0}) (async, rerun: 32) r13 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004440)={0x3c, r14, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r15}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x3c}}, 0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000004480)={0xffffffffffffffff}) (async) r17 = open$dir(&(0x7f00000044c0)='./file0\x00', 0x420000, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004580)=[{{&(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000001540)=[{&(0x7f0000000340)="2115d8ceff96374e9d24046b25a4c208a4f07e2593da4800d445ab6c2e1730aca1883a3279ee87c03a32a757bec1ab84a16f6d98391953c35aa56beddcf1be310e93d701ad40c40f5dacfb3c433143ee241589cba8c19359bbabeb4f35ead224940df0e4249ca8b05e64fe374d48f3a1ccb7e898284e3be3d8be5f4587de022ed42a21bb6e1e35423367217864f009b9aabe24fe3d40049d9e5937fb0a08844c1612a995bbeb3f3b2dfe686a6a90933b020ca93a5143206a261c2528c8d02d5fcd92f7874eada72c90abf06a0e2c7c7f1711b8e35e4867d4a6225d26", 0xdc}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="8cfcad146a4992a29b9066e4b91a09260fe8af3fc357afd319a52e717cb8ca3d812db6b41f2b1d11b9aa2c8503657d2b86d8922a4365fd66e2dbef8fa2f6010fae0772d7496ea3aff040773e75c848f3acbb59ee048fa7be89fce84aef9c75bb1a1607686cd03704556ad3c91a66ac2d4c7c360608e1d3c947dc721f44b253b95daad6002816dedd1e08c1867887a9b7f3cc1b84ac141685af54173284c22df146a72121ab3ad5f8b5b72aa66acd8dcb83d1330370bdc8894ccd7b1fdfc4dab0623d5f810dd600fe161312e172874846635e9e31d90c0702a88d57bdf0", 0xdd}], 0x3, &(0x7f00000015c0)=[@rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @rights={{0x1c, 0x1, 0x1, [r0, r1, r0]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}], 0xc0, 0x8000}}, {{&(0x7f0000001680)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002940)=[{&(0x7f0000001700)="792ca9f0566685244d9e7bce03c7ee020dffd28fe312cc32b0b95b05c6131b1c3bfb63724caed42c", 0x28}, {&(0x7f0000001740)="12bed18942b268c5f9e7b7113a604a5f63ae26bdc4ea19ace73076c1752d00547add17eeafd31c9dd26673d5cecc9b4020dc1f882c42aa119ddf", 0x3a}, {&(0x7f0000001780)="0c9c422771a6ecfd1c50f7192da713e5816549b5b21482c1898d4dfa0e2570f6b6b5c0bf018fdbb49ccda73057364ca90f3f96b5fe5bc9e9bebd707326331e0c4fdc615981c295de246b2d6453986c41977e5f8f5881fe2310a93bacf4d8cfc5d4969953b41a6e02ca640f7262c4f108c2860723230584a7fb6018160a33bbf99ff71872100e3fb8c161b3c0ac1d06714704bb43cdca498893d13605bb092cb0df3b35acfc99f38465847b9b941e9c9e832f94a2e770f1725ca00875bce26d6449268b6661b55fdd356c3119abcd1de514f4038fdcbf8bbf55895c88c16f2e89eed8bd5670f695212da51c8bfc01", 0xee}, {&(0x7f0000001880)="67efc2bdc81e11ec9ecfa665c56fd7ee2eae00edf1cd852572846b7f4af77b6e401784b72647e93fecdebfbfa958fc75d568926f1522b556189090bbb3b9d07b1757cbc0e9edae5823b5d2a0a2d3ae6031300e8817dbb6ed156c32aacb09b02297017773eabcaeeda5fd2cee355de8a489a472a81bcb093bead7dcbb7ac0ffc011f9269c5c1d75c8b84a8435feced6eaec565b671190b3382a6544ac30c9dd92bd75ec97", 0xa4}, {&(0x7f0000001940)="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", 0x1000}], 0x5, &(0x7f00000029c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r1, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x40, 0x24004801}}, {{&(0x7f0000002a00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002c40)=[{&(0x7f0000002a80)="bed9a795aa28f990dd046b6fa5b10404abce2031c6147b8176291ce43db5721ff15a9d039a7132adea9d40a0b11223c90ba33551e924ccfbfe6b5c11145a1ac799858193f3e4657d789cffb3d6362b6d1ffed0be222107d162330d9f95f5e64c98f3ab5878675c384cb7dc4051d778dfccb5393a973af2bdb15d38c3eae4d5c01764c645543c42c0c37dd5d0c728c193563a21a2ab8e02b8e9bfad5973fdea85cae7dd037d6efefb81eb2844da3c32a3ffc9b052105aa39da17e2005a959698d0d559cbe224fd73ab446bbdf214fb6b72a6a75120d5989e274df8227", 0xdc}, {&(0x7f0000002b80)="3459730abea3cf9cd6bf0e5595646c83d271638430a988232a95b41eae286325f7dd02044adb558bcc7b6e67bdd04977c74d09118a0c910684d02ee51f16d5a868e4bc77fa023a7f0b85391891e49f61736e412b85cd4638aa8438c5c7c43ef890573083d33c877d4984806aa391d2dd89a2b2", 0x73}, {&(0x7f0000002c00)="1509b7d3b5311253ed1b792b8792e3af6ec78fb0e8fcaebf1f224440d77abfcfc1f7e9cdc8f0aca966", 0x29}], 0x3, &(0x7f0000003300)=ANY=[@ANYBLOB="100000000000000001000000010000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="02000000cd32b5275879ee6b4c998ddd38b5deace61125c20d18b51ed6b3c9dceb1666af43ed5a4835c0554787811cac5a92"], 0x30, 0x4048810}}, {{&(0x7f0000002d00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002fc0)=[{&(0x7f0000002d80)="5d7ffb9ddb9e5b20d2b18f53827998130c33e122959a90d4721d25", 0x1b}, {&(0x7f0000002dc0)="8ca1c7e69ca4cb719462fa99f4e16d8dd1944e8c467b9108b3ceec1731dd8d43428f1f53b06b522e9188d93ff80f6673365f5498c520c3ee1742d5956a58108b552bdd1dca2db345e0f5aa0a3e5b9388b6e3699956530310b65b3178ec41afc9721f1029fc6e5e89c2efb8695a8d03162c81b4bd79f5373909aaf90a47c474333099bf7964db5fa2af9b6249484a1523a5e6bc3e24d7c357f1c7474bb858", 0x9e}, {&(0x7f0000002e80)="3eb8cccc3a64313e149fddda1530016ee2860d68a1bfcd3034a48ad92cebaf5417239ca60c5650a989a5f04574f1b0ce57979418fe888d343f9c3e2ea1ac62458a5cac72cfe827647b5cd360cb35bea6e0d23abf4c75537d27d50bec278d74364a7044f6cb066b5ba73938637984245f501e9cb664cd8c04eb9d1b3b9f707045bb54fce5b9787b8e7eb5ca1aaf4c8c3ec47b48988ba885d291528a9108690a10d8dd749e6e7a2d7b259771538da7e8c6097298fceb7c6afd0b5f1f1d4cb41c6a2bc2ebc14a19764410ce3b3790104ba0312e65be60dae15b33523d9904152740c235d26ca2595c31e7acfe55221affff", 0xf0}, {&(0x7f0000002f80)="363424d76afca573d454db1ba77614a25d3bad6bc0d684bf46ba9376367677d15eb1d9c5a5ad56", 0x27}], 0x4, &(0x7f0000003040)=[@rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}], 0x38, 0x4810}}, {{&(0x7f0000003080)=@file={0x395ad04d9af3585f, './file0\x00'}, 0x6e, &(0x7f00000032c0)=[{&(0x7f0000003100)="c42ef4a6a6454c44f2436c7200fe0cbe96ffc8cbc917efc9a3cc462c79a1f9d7b15798b650971121b66a2774c97bfdee3e9fc472799fba8ae4696aeb7fd7d5fa8d4f89a052f0608f1316dc99423dc6add1e345e9a28ee138cde6d66f59d30967e1e53059463deade506498e8607ecac5c0e4ecaab8f83000cdd28a36e5501e0da1f1d98b03", 0x85}, {&(0x7f00000031c0)="a6de982c43d00b48a531113b5bdfd989dfcdac1e26ccc6f8c5f4714640ad39fa3e77f872dc64afccfbe97e56cba46959070daf35520bb6380aa18e82d4d4321c16bfba33c0cf1152a8ffb5231bdb8fc963b94441f5a2a979d8b62cf8255fa1515c2f3f49f5302326c3145df7435a665c6216a6b9fb4d91e75ce7bbbdcba31a61cdd7d40f21a5b4faf74552bcecfd6d84d867a9160ff024a2083fc511f1661a2e0a7ec8c771d5f1838c181585c0477cc889262ea632d35ad7ca70280c5978db1ec1a2ef003de1637b862e69e07c942a86ada54933", 0xd4}], 0x2, &(0x7f0000003380)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x70, 0x20008804}}, {{&(0x7f0000003400)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003640)=[{&(0x7f0000003480)="bf0b549641531527d8b6b8d8881db0dae6ea4f21d850c8913f704b2506549ab991a6317b9e219c28700b662c1e4497dc5bb6bead3497176177229113b679eca398ab7529a33f0dd41350c62fa3858dbf30303028c09d73c6bfb5d8499d21b9c2666810785434ecf1978425b6bd8088e0396df0007d6722d9144e34e6813efd3e364b16d3092d76c470ad629df22ded4bdfe4324ce06ce2690407f9cc407725ac775f4b38b298757f077e1997c568e2a29290d272859ebea8567cd5192d249f6a16bc1e9b133f71111038f31232140f3cce8cc80428e4879bf1", 0xd9}, {&(0x7f0000003580)="a4a56e5ebe2d275a6d", 0x9}, {&(0x7f00000035c0)}, {&(0x7f0000003600)="459c33598c07fa74fb250b496e412f33fb9a4ec4f860d6aee0", 0x19}], 0x4, &(0x7f0000003680), 0x0, 0x80008}}, {{&(0x7f00000036c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000003940)=[{&(0x7f0000003740)="8d43d935fb33c40699b6bfa0fc17ab212cfb10185d168e10a74fea8509340d4fd6039188133b67590d3382a687f7d2d73ca000e30ac06ae42600c67e6d06806b7538c9daeea3c75c777cb100fcd1bbc14e7829d52ce85f35edadb13f4581f5f9a1df79c0982b9066fcdcfdbf8dbf456f004e28a803204ed0b87d88d20893535b25943ba4739c63288e8cd621291e19ba47e125a72994c1ca599217c9a9de137500f815dfec233e69bb094a1f8122e955054821ee0c15e522bea5971f3152cda62394eb62e1ca5950aef256a4b8d0a96bff8826d1fee90690a5f4cc83a5a92fc59d8024982df89831e0", 0xe9}, {&(0x7f0000003840)="9a96845d4f9fc4e2858c6fdc40d8d0be6d14fe3a2f1b08f809b644fa44521d89e6160356d549494d7e72e0c00c2684b00a052da2da0e31fd4a043aa7213cef19f2246bd04200413feaa63b311bc40d42b1db8e132b51c8d99ac299f302d6daad69bc2759bb3eca084a3ac8ceb0113642a62d4d59e2eaa099e192147d7984890df6042f2991b941f0e2293e46e0e980966a03e9e8ae0d233bf9c950f1", 0x9c}, {&(0x7f0000003900)="b80238bb14f9985bfa5a4be6004a484e3c8939966dee33d3bc2b4f4a7f4ae17250369ade91dd22d1292d200ac0a7b848806a97f6f2837c0c929c6eb2d7", 0x3d}], 0x3, &(0x7f0000003a80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [r0, r0, r0, r1, r1, 0xffffffffffffffff, 0xffffffffffffffff, r1, r1, r1]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x128, 0x8000}}, {{&(0x7f0000003bc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003ec0)=[{&(0x7f0000003c40)="79c57ce20f802bb8bca5b3af3ac26c3a26840ab5df9276311fab8f8057aaa0bad0a15dd936f5ed6ced45b11f471c5c89e65227daa55deac7f010f52bdafe8e5efcfff504e69fd7ad", 0x48}, {&(0x7f0000003cc0)="fcc67e89170cb2704e83e2de331a41950845e724ca8a3c215aa79609f5587acde5fa5798a552be5542924b8c198683140bec97015565aee17793b661a1da090ff1be29e412b0fd09630d197fab079358da46ba7eb7128c929722e8574004a9b17a029debced64927d0557ab1aa0d64119b6d36d514b9304ef339a6e99a76d2593ef8537ac99d9869", 0x88}, {&(0x7f0000003d80)="bed960c52d97dcdb20993127ff33893c1c8ee9df67db6baf18c0d10c04f2388fcc41a11c3044c21e510b1aacd23f2670244eaa0c98236acd223c03c34df14a8517ac419c2b27a8c82d00f3177eb3d34953bb90d7e685f9de85c49f5f3dbcd2afa09b4bb94505372126a89fab973cd766285a9d65b0345343f67a4d6213ec8bd200520d2cdb2d18f0c474f850549c0fca5e9bcf161146e64e68295f0c084528e353a3e81405643afcbe9ed14328d8f3ef91e08d1c9c61b464d195322abb8229a5a663eb2db8418c4c", 0xc8}, {&(0x7f0000003e80)="210a03aecd6243dc928ab18c1b6a601d570ae065be62168bb1f72192085e359b25c821a5260e52dc16197a794d3391626f2792e074", 0x35}], 0x4, &(0x7f0000004000)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r2}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r4, r5}}}, @rights={{0x1c, 0x1, 0x1, [r0, r6, r9]}}, @rights={{0x10}}], 0x90, 0x20040004}}, {{&(0x7f00000040c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000004400)=[{&(0x7f0000004140)="5f262a8a6b59e1e6b2195822441162a1738fdf7991bd3c4e19f0e093435910d6e9bf513ce697196e9ba7d68f0ece948c0b0905b269e6bd34ac6cce33a8aed39ea823cbfb1752dc1d27520a8f21762e59122ee217331e6416673479f1b949197f1d8972a13b989736a98e25a2385a420aab243609aa9d8aee88185c9331184f7a382cd5da76739451657cc652498737380eb23d950ebc4c77cd93d666919dc32d4e042a56052d0e7bd61655fba15042b51ad75520e68c3e18e64463a79117363887c3a2f06871fa0f2b7c787b67dee9cf55b6a283fa38a0dfd4a33320f1cb2588283c0ce7f3", 0xe5}, {&(0x7f0000004240)="90bb72fc7e33080e51962aa1696b4cb3795163867b30c3ee13af150391cd0c8bbf65fa64df7b307b2c704e2982922b13c1b450fef42f3526cc41744b8c1c411724374b6009351767822367531d1bd69ed7ff690bc35271658af9934f04fa7a84b19b5f39a569b7271a6d7d5e61e402e406d406ea21d0d2cfc506eb7cfac0384953919dcc767ea954fe1cd03e1605cba9ad56e7f41c1efd2c449be7850d65451a8f48602dda6d24d898dd6341abd405e235d39d66ec3f5519", 0xb8}, {&(0x7f0000004300)="4f0ccf68712ae20fc8be9f81516e9ef7806d7085896257c47394c5013f965ad5f9cfb035b318f07cde5b12e9105c362e966e1fd47fdbfedc1454c2c55441972ac788d6f402509b870e0a5e4c01c936e0152d347ff32a65758a041715665d2840273d32e36454ebe6d86dda9f3439d98c84d3436630b06ac9fd57e0cd3ebda466ea0e9b90b2e66233191853e1d019294d7f6fcd0ff5480831d78319ab0f73d95fee637aa69fd6a4f3c87b6d02a56b0692bd4a7c161d51cde11826a14e174d45f8e8b743", 0xc3}], 0x3, &(0x7f0000004500)=[@cred={{0x1c, 0x1, 0x2, {r12, 0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [r1, r13, r16]}}, @rights={{0x1c, 0x1, 0x1, [r17, r1, r1]}}], 0x60, 0x841}}], 0x9, 0x20040054) (async) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000080)={0x0, 0x85, "0f634ff81b05e7c10b8046ff4c9c426471e3a7a4b8d0b422527ca19ecaef316e13e55b685cb28f82b6c560264253fabbd3680d578ab7c366177d1fd6bc265a867f4a8c096b74b8bd5e56a8cdafba51a6a7c448e1314c5ab85e22e3ab13142dc3d81f97482607e90e04cef85759fee9d40b07ff9816dae7adb0024529aad8ca9e905b6b0a0e"}, &(0x7f0000000140)=0x8d) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000180)={r18, @in={{0x2, 0x4e20, @local}}, [0x8, 0xd97, 0x8, 0x8000000000000001, 0x81, 0x268000000000, 0x8000, 0x6, 0x8, 0x6, 0x9, 0x9, 0x0, 0x68, 0x80000000]}, &(0x7f0000000280)=0x100) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040)=0x8, 0x4) (async) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 01:54:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3f00}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:05 executing program 0: socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x2, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r0}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2219.112040][ T8486] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xc00}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2219.339256][ T8492] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:05 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x10, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x2, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:06 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x11000000}, 0x0) 01:54:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4788}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2219.714971][ T8504] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:06 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x10, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:06 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0xc) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvfrom$inet6(r0, &(0x7f0000000040)=""/200, 0xc8, 0x3, &(0x7f0000000140)={0xa, 0x4e23, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x0, 0x0) sync_file_range(r1, 0x0, 0x0, 0x1) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x19, &(0x7f00000000c0)={r4}, 0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000180)={r4, @in6={{0xa, 0x4e23, 0x9a, @rand_addr=' \x01\x00', 0x6}}}, &(0x7f0000000240)=0x84) [ 2219.963677][ T8510] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:06 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x12000000}, 0x0) 01:54:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x2, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xd00}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4800}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:06 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x10, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x2, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:06 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x25000000}, 0x0) [ 2220.442769][ T8521] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2220.468340][ T8525] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x10, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xe00}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4888}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x2, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2220.915524][ T8533] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:07 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0xc) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvfrom$inet6(r0, &(0x7f0000000040)=""/200, 0xc8, 0x3, &(0x7f0000000140)={0xa, 0x4e23, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x0, 0x0) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x0, 0x0) sync_file_range(r1, 0x0, 0x0, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x19, &(0x7f00000000c0)={r4}, 0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000180)={r4, @in6={{0xa, 0x4e23, 0x9a, @rand_addr=' \x01\x00', 0x6}}}, &(0x7f0000000240)=0x84) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000180)={r4, @in6={{0xa, 0x4e23, 0x9a, @rand_addr=' \x01\x00', 0x6}}}, &(0x7f0000000240)=0x84) 01:54:07 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x3f000000}, 0x0) 01:54:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) [ 2221.125287][ T8536] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xf00}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x2, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4c00}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:07 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x48000000}, 0x0) 01:54:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) [ 2221.464899][ T8546] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1052}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x2, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2221.690983][ T8554] validate_nla: 9 callbacks suppressed [ 2221.691051][ T8554] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2221.705281][ T8554] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:08 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x4c000000}, 0x0) [ 2221.943372][ T8560] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2221.952161][ T8560] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4d10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2222.232531][ T8565] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2222.241238][ T8565] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:08 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0xc) (async) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) recvfrom$inet6(r0, &(0x7f0000000040)=""/200, 0xc8, 0x3, &(0x7f0000000140)={0xa, 0x4e23, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x0, 0x0) sync_file_range(r1, 0x0, 0x0, 0x1) (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x19, &(0x7f00000000c0)={r4}, 0x8) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000180)={r4, @in6={{0xa, 0x4e23, 0x9a, @rand_addr=' \x01\x00', 0x6}}}, &(0x7f0000000240)=0x84) 01:54:08 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) 01:54:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) 01:54:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1100}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:08 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x60000000}, 0x0) 01:54:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x5865}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2222.473740][ T8569] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2222.482296][ T8569] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) 01:54:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) [ 2222.746477][ T8580] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2222.755008][ T8580] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1200}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x65580000}, 0x0) 01:54:09 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0xc) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$can_raw(0x1d, 0x3, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x6, 0x0, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 01:54:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x6000}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2223.048727][ T8587] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2223.057775][ T8587] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) 01:54:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 01:54:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x68000000}, 0x0) 01:54:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1fe3}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2223.419133][ T8594] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2223.427855][ T8594] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) [ 2223.561548][ T8602] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2223.570127][ T8602] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x6558}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 01:54:10 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0xc) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$can_raw(0x1d, 0x3, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x6, 0x0, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0xc) (async) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x6, 0x0, 0x4) (async) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) 01:54:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1fe4}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:10 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x6c000000}, 0x0) 01:54:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) [ 2223.956038][ T8608] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2223.969370][ T8608] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) [ 2224.173910][ T8617] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2224.182644][ T8617] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:10 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x74000000}, 0x0) 01:54:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x6800}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:10 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0xc) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$can_raw(0x1d, 0x3, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x6, 0x0, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0xc) (async) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x6, 0x0, 0x4) (async) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) 01:54:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 01:54:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2500}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) [ 2224.521950][ T8622] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2224.666478][ T8627] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x74210000}, 0x0) 01:54:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 01:54:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 01:54:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x6c00}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3f00}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:11 executing program 5: r0 = openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0xa0600, 0x6}, 0x18) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x400000, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000100)) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0xc) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x40000000, @loopback, 0x8}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000300)) [ 2225.123326][ T8640] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2225.237795][ T8645] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x7400}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x7a000000}, 0x0) 01:54:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x0, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x10, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4788}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) [ 2225.530085][ T8649] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x7a00}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:12 executing program 5: r0 = openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0xa0600, 0x6}, 0x18) (async) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x400000, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000100)) (async) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0xc) (async) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x40000000, @loopback, 0x8}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000300)) [ 2225.701892][ T8656] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x0, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x10, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 01:54:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x81000000}, 0x0) 01:54:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4800}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2225.944403][ T8659] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8100}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x0, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x10, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x0, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x2, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2226.347747][ T8671] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:12 executing program 5: r0 = openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0xa0600, 0x6}, 0x18) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x400000, 0x10) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000100)) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0xc) (async) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x40000000, @loopback, 0x8}, 0x1c) (async) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000300)) 01:54:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x820d0000}, 0x0) 01:54:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4888}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8847}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2226.891878][ T8687] validate_nla: 8 callbacks suppressed [ 2226.891943][ T8687] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2226.906362][ T8687] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x3c, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x10, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}]}, 0x3c}}, 0x0) 01:54:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x88470000}, 0x0) 01:54:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x0, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x2, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:13 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0xc) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x0, 0x0) sync_file_range(r1, 0x0, 0x0, 0x1) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="66181093816ca71958b1da0c0b84904153e0e4756eef82d226bf09889a8e9cf2fcd29dde591086fd3fa575fa304ec68a2448cea405d95acdc696c0d27849c2fa1ac1b5e4b97678052af401a4eca60d4ca080f5417c8ec2ca1f7d0f8c9a73862fe1c7941e28272a835f0acd4d0a2ab8810bfeee703614e0e091dfb7ccdf8d7125c3e3"], &(0x7f00000000c0)=0x1b) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000240)={0x0, 0xb1}, &(0x7f0000000280)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) pwrite64(r3, &(0x7f0000000100)="1ec0c4771ec7f97d5d726e0c8a4e183a68739fc9dbcbac237dd8b2e891ef38055c2e02fb4d4cbe2990a73c3735e4086f8363526ec7843aa931c0f97a9b420cb062288bab896c88100ed7015fcdd31dc61f17cc03de0747b9a099b4594180072168ce080089d1b930ed4bf422b401a0825a166b292b1602e9f665473e7dd43923bcd415ef53f51a33381e0e55f40f117fdfb7ca4b902f1b98280e883b8e253e974ce02a8efd5bcd81946f03318627131e6425d780895439146b8c5037d5034cbeed0150b6e4f2b74dad2a3bb25637ce7c50e542473590c801", 0xd8, 0x6) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 01:54:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4c00}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2227.278428][ T8692] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2227.287389][ T8692] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2227.461127][ T8699] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2227.469907][ T8699] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x0, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x2, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x88480000}, 0x0) 01:54:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x3c, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x10, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}]}, 0x3c}}, 0x0) 01:54:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8848}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x5210}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x3c, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x2, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}]}, 0x3c}}, 0x0) 01:54:14 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0xc) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x0, 0x0) sync_file_range(r1, 0x0, 0x0, 0x1) (async) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="66181093816ca71958b1da0c0b84904153e0e4756eef82d226bf09889a8e9cf2fcd29dde591086fd3fa575fa304ec68a2448cea405d95acdc696c0d27849c2fa1ac1b5e4b97678052af401a4eca60d4ca080f5417c8ec2ca1f7d0f8c9a73862fe1c7941e28272a835f0acd4d0a2ab8810bfeee703614e0e091dfb7ccdf8d7125c3e3"], &(0x7f00000000c0)=0x1b) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000240)={0x0, 0xb1}, &(0x7f0000000280)=0x8) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) pwrite64(r3, &(0x7f0000000100)="1ec0c4771ec7f97d5d726e0c8a4e183a68739fc9dbcbac237dd8b2e891ef38055c2e02fb4d4cbe2990a73c3735e4086f8363526ec7843aa931c0f97a9b420cb062288bab896c88100ed7015fcdd31dc61f17cc03de0747b9a099b4594180072168ce080089d1b930ed4bf422b401a0825a166b292b1602e9f665473e7dd43923bcd415ef53f51a33381e0e55f40f117fdfb7ca4b902f1b98280e883b8e253e974ce02a8efd5bcd81946f03318627131e6425d780895439146b8c5037d5034cbeed0150b6e4f2b74dad2a3bb25637ce7c50e542473590c801", 0xd8, 0x6) (async) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 01:54:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x3c, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x10, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}]}, 0x3c}}, 0x0) [ 2227.993530][ T8710] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2228.006140][ T8710] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x88a8ffff}, 0x0) 01:54:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfc00}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x5865}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x3c, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x2, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}]}, 0x3c}}, 0x0) [ 2228.388871][ T8720] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2228.397535][ T8720] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:14 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0xc) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x0, 0x0) sync_file_range(r1, 0x0, 0x0, 0x1) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="66181093816ca71958b1da0c0b84904153e0e4756eef82d226bf09889a8e9cf2fcd29dde591086fd3fa575fa304ec68a2448cea405d95acdc696c0d27849c2fa1ac1b5e4b97678052af401a4eca60d4ca080f5417c8ec2ca1f7d0f8c9a73862fe1c7941e28272a835f0acd4d0a2ab8810bfeee703614e0e091dfb7ccdf8d7125c3e3"], &(0x7f00000000c0)=0x1b) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000240)={0x0, 0xb1}, &(0x7f0000000280)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) pwrite64(r3, &(0x7f0000000100)="1ec0c4771ec7f97d5d726e0c8a4e183a68739fc9dbcbac237dd8b2e891ef38055c2e02fb4d4cbe2990a73c3735e4086f8363526ec7843aa931c0f97a9b420cb062288bab896c88100ed7015fcdd31dc61f17cc03de0747b9a099b4594180072168ce080089d1b930ed4bf422b401a0825a166b292b1602e9f665473e7dd43923bcd415ef53f51a33381e0e55f40f117fdfb7ca4b902f1b98280e883b8e253e974ce02a8efd5bcd81946f03318627131e6425d780895439146b8c5037d5034cbeed0150b6e4f2b74dad2a3bb25637ce7c50e542473590c801", 0xd8, 0x6) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0xc) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x0, 0x0) (async) sync_file_range(r1, 0x0, 0x0, 0x1) (async) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="66181093816ca71958b1da0c0b84904153e0e4756eef82d226bf09889a8e9cf2fcd29dde591086fd3fa575fa304ec68a2448cea405d95acdc696c0d27849c2fa1ac1b5e4b97678052af401a4eca60d4ca080f5417c8ec2ca1f7d0f8c9a73862fe1c7941e28272a835f0acd4d0a2ab8810bfeee703614e0e091dfb7ccdf8d7125c3e3"], &(0x7f00000000c0)=0x1b) (async) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000240)={0x0, 0xb1}, &(0x7f0000000280)=0x8) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) pwrite64(r3, &(0x7f0000000100)="1ec0c4771ec7f97d5d726e0c8a4e183a68739fc9dbcbac237dd8b2e891ef38055c2e02fb4d4cbe2990a73c3735e4086f8363526ec7843aa931c0f97a9b420cb062288bab896c88100ed7015fcdd31dc61f17cc03de0747b9a099b4594180072168ce080089d1b930ed4bf422b401a0825a166b292b1602e9f665473e7dd43923bcd415ef53f51a33381e0e55f40f117fdfb7ca4b902f1b98280e883b8e253e974ce02a8efd5bcd81946f03318627131e6425d780895439146b8c5037d5034cbeed0150b6e4f2b74dad2a3bb25637ce7c50e542473590c801", 0xd8, 0x6) (async) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) 01:54:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0xe0ffffff}, 0x0) 01:54:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xff00}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2228.615984][ T8727] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2228.624743][ T8727] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x10, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6}]}, 0x44}}, 0x0) 01:54:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x3c, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x2, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}]}, 0x3c}}, 0x0) 01:54:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x6000}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2228.842445][ T8732] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2228.851819][ T8732] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0xf0ffffff}, 0x0) 01:54:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x2, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:15 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80}}, './file0\x00'}) syz_open_procfs(0x0, &(0x7f0000000100)='net/dev\x00') setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0xfffffffc, 0x10}, 0xc) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x0, 0x0) sync_file_range(r2, 0x0, 0x0, 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x8, 0x9, 0x2, 0x0, 0x1, 0x5, 0x3f, 0x1f, 0xda, 0x40, 0x80, 0x6, 0x9, 0x8}, 0xe) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) [ 2229.113822][ T8742] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2229.125527][ T8742] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x2, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6}]}, 0x44}}, 0x0) 01:54:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x10, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6}]}, 0x44}}, 0x0) 01:54:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0xfc000000}, 0x0) 01:54:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x6558}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2229.381198][ T8746] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 01:54:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x2, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6}]}, 0x44}}, 0x0) 01:54:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x4, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2229.662614][ T8757] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2229.671340][ T8757] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:16 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0xfdffffff}, 0x0) 01:54:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x10, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6}]}, 0x44}}, 0x0) 01:54:16 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80}}, './file0\x00'}) (async) syz_open_procfs(0x0, &(0x7f0000000100)='net/dev\x00') setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0xfffffffc, 0x10}, 0xc) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x0, 0x0) sync_file_range(r2, 0x0, 0x0, 0x1) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x8, 0x9, 0x2, 0x0, 0x1, 0x5, 0x3f, 0x1f, 0xda, 0x40, 0x80, 0x6, 0x9, 0x8}, 0xe) (async) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) [ 2229.873615][ T8760] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:54:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x6800}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x2, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6}]}, 0x44}}, 0x0) 01:54:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x5, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x3c, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x10, {0x0, 0x0, 0x10}}}}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x3c}}, 0x0) [ 2230.216162][ T8769] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:16 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0xfe80ffff}, 0x0) 01:54:16 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80}}, './file0\x00'}) syz_open_procfs(0x0, &(0x7f0000000100)='net/dev\x00') setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0xfffffffc, 0x10}, 0xc) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x0, 0x0) sync_file_range(r2, 0x0, 0x0, 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x8, 0x9, 0x2, 0x0, 0x1, 0x5, 0x3f, 0x1f, 0xda, 0x40, 0x80, 0x6, 0x9, 0x8}, 0xe) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80}}, './file0\x00'}) (async) syz_open_procfs(0x0, &(0x7f0000000100)='net/dev\x00') (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0xfffffffc, 0x10}, 0xc) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x0, 0x0) (async) sync_file_range(r2, 0x0, 0x0, 0x1) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x8, 0x9, 0x2, 0x0, 0x1, 0x5, 0x3f, 0x1f, 0xda, 0x40, 0x80, 0x6, 0x9, 0x8}, 0xe) (async) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) 01:54:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x6c00}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x6, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x3c, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x2, {0x0, 0x0, 0x10}}}}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x3c}}, 0x0) 01:54:17 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0xfec0ffff}, 0x0) [ 2230.676805][ T8779] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x3c, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x10, {0x0, 0x0, 0x10}}}}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x3c}}, 0x0) 01:54:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x7400}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:17 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0xff000000}, 0x0) 01:54:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x3c, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x2, {0x0, 0x0, 0x10}}}}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x3c}}, 0x0) 01:54:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x9, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2231.167825][ T8795] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x3c, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x10, {0x0, 0x0, 0x10}}}}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x3c}}, 0x0) 01:54:17 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0xc) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x1000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffd}, 0x1c) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x501300, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000200)=ANY=[@ANYBLOB="c910c0357274bb41c6f68c59241d7312632cc2cf4aa1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000180)=0x14) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value={r2, 0x5}, 0x8) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000240)={0x0, @l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, @isdn={0x22, 0x3a, 0x5, 0xa1, 0x4}, @phonet={0x23, 0xdb, 0x1, 0x1f}, 0x9, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='macvlan0\x00', 0xf1, 0x3b4, 0x1000}) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) 01:54:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x3c, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x2, {0x0, 0x0, 0x10}}}}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x3c}}, 0x0) 01:54:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x7a00}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:17 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0xff600000}, 0x0) [ 2231.548575][ T8805] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2231.631303][ T8810] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0xa, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x10, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x2, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8100}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:18 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0xc) (async) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x1000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffd}, 0x1c) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x501300, 0x0) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000200)=ANY=[@ANYBLOB="c910c0357274bb41c6f68c59241d7312632cc2cf4aa1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000180)=0x14) (rerun: 32) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value={r2, 0x5}, 0x8) (async) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000240)={0x0, @l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, @isdn={0x22, 0x3a, 0x5, 0xa1, 0x4}, @phonet={0x23, 0xdb, 0x1, 0x1f}, 0x9, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='macvlan0\x00', 0xf1, 0x3b4, 0x1000}) (async) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) 01:54:18 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0xffff0000}, 0x0) [ 2231.971781][ T8815] validate_nla: 7 callbacks suppressed [ 2231.971844][ T8815] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 2231.986315][ T8815] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 01:54:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x10, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2232.180066][ T8821] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2232.188527][ T8821] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x2, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:18 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0xffff80fe}, 0x0) 01:54:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0xb, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8847}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x10, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:19 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0xc) (async) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x1000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffd}, 0x1c) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x501300, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000200)=ANY=[@ANYBLOB="c910c0357274bb41c6f68c59241d7312632cc2cf4aa1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000180)=0x14) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value={r2, 0x5}, 0x8) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000240)={0x0, @l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, @isdn={0x22, 0x3a, 0x5, 0xa1, 0x4}, @phonet={0x23, 0xdb, 0x1, 0x1f}, 0x9, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='macvlan0\x00', 0xf1, 0x3b4, 0x1000}) (async, rerun: 64) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async, rerun: 64) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) 01:54:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x2, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2232.712917][ T8837] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 2232.723109][ T8837] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2232.743259][ T8838] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2232.751915][ T8838] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:19 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0xffffa888}, 0x0) 01:54:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x2c, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x2c}}, 0x0) 01:54:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0xc, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8848}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x2c, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x2c}}, 0x0) [ 2233.159288][ T8848] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2233.171984][ T8849] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 2233.187525][ T8849] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2233.265241][ T8852] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2233.273899][ T8852] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:19 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0xffffc0fe}, 0x0) 01:54:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x2c, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x2c}}, 0x0) [ 2233.323750][ T8853] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2233.331272][ T8853] IPv6: NLM_F_CREATE should be set when creating new route 01:54:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x10, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x2c, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x2c}}, 0x0) 01:54:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xe31f}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2233.637718][ T8857] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2233.706896][ T8859] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 01:54:20 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000100)={0x2, [0x0, 0x0]}, &(0x7f0000000140)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={0x0, 0xffffff80}, &(0x7f0000000080)=0x8) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="b9fbde6633879dc310bfed408240f724", 0x10, 0x4840, &(0x7f000005ffe4)={0xa, 0x4e23, 0x4000, @loopback}, 0x1c) 01:54:20 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0xffffff7f}, 0x0) 01:54:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x2c, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x2c}}, 0x0) 01:54:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x11, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2233.869977][ T8862] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2233.951456][ T8863] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2233.960065][ T8863] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x2c, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x2c}}, 0x0) [ 2234.075573][ T8868] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2234.091869][ T8869] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 01:54:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xe41f}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:20 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0xffffffe0}, 0x0) 01:54:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x0, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x14, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2234.342439][ T8874] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2234.372435][ T8875] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2234.382212][ T8875] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:20 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000100)={0x2, [0x0, 0x0]}, &(0x7f0000000140)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0xc) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={0x0, 0xffffff80}, &(0x7f0000000080)=0x8) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={0x0, 0xffffff80}, &(0x7f0000000080)=0x8) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="b9fbde6633879dc310bfed408240f724", 0x10, 0x4840, &(0x7f000005ffe4)={0xa, 0x4e23, 0x4000, @loopback}, 0x1c) 01:54:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x0, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2234.565451][ T8881] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 2234.589161][ T8880] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 01:54:21 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0xfffffff0}, 0x0) 01:54:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfc00}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x0, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x15, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:21 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000100)={0x2, [0x0, 0x0]}, &(0x7f0000000140)=0xc) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0xc) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={0x0, 0xffffff80}, &(0x7f0000000080)=0x8) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="b9fbde6633879dc310bfed408240f724", 0x10, 0x4840, &(0x7f000005ffe4)={0xa, 0x4e23, 0x4000, @loopback}, 0x1c) 01:54:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x0, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2235.002005][ T8892] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:21 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0xfffffffd}, 0x0) [ 2235.047219][ T8893] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 01:54:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x0, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xff00}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x29, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:21 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x60ffffffffff}, 0x0) 01:54:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x0, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2235.417286][ T8903] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:22 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0xc) r1 = open(&(0x7f0000000040)='./file0\x00', 0x8000, 0x40) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x5, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) [ 2235.501840][ T8905] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 01:54:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x3b, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x2, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:22 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0xc) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 01:54:22 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0xffff00000000}, 0x0) [ 2235.963569][ T8915] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 01:54:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x4, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:22 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0xc) r1 = open(&(0x7f0000000040)='./file0\x00', 0x8000, 0x40) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x5, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) [ 2236.012643][ T8916] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 01:54:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x4, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x3d00, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:22 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@newqdisc={0x198, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8}}, @qdisc_kind_options=@q_netem={{0xa}, {0x154, 0x2, {{0x0, 0x0, 0x0, 0x0, 0xfffffffb}, [@TCA_NETEM_RATE={0x14, 0x6, {0x0, 0x2}}, @TCA_NETEM_CORR={0x10}, @TCA_NETEM_SLOT={0x2c}, @TCA_NETEM_CORRUPT={0xc}, @TCA_NETEM_JITTER64={0xc}, @TCA_NETEM_LOSS={0x6c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x24, 0x1, {0x0, 0x0, 0x0, 0xffffffff}}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x8}}, @NETEM_LOSS_GE={0x14}]}, @TCA_NETEM_CORR={0x10}, @TCA_NETEM_DELAY_DIST={0x53, 0x2, "bb31dd582025a5bfe05b342a891035fe2abd168e2c8b8d284dcd49405a3da4233a46fc0f50f25bb2abef41f435190e7d58e97dac5d759d1138e8b1e6821e0d9f9be0a90d6a87ad3aa42cf3624d64b1"}]}}}]}, 0x198}}, 0x0) bind$packet(r0, &(0x7f0000000400)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="1555f6acfd136f8ed06375bd86dd", 0xe, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) 01:54:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x4, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:22 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x40030000000000}, 0x0) 01:54:23 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0xc) (async) r1 = open(&(0x7f0000000040)='./file0\x00', 0x8000, 0x40) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x5, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) [ 2236.570468][ T8930] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 01:54:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x5, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2236.674747][ T8929] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 01:54:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x5100, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x4, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:23 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x100000000000000}, 0x0) [ 2237.080650][ T8944] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 01:54:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x6, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2237.164431][ T8947] validate_nla: 11 callbacks suppressed [ 2237.164499][ T8947] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 01:54:23 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@newqdisc={0x198, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8}}, @qdisc_kind_options=@q_netem={{0xa}, {0x154, 0x2, {{0x0, 0x0, 0x0, 0x0, 0xfffffffb}, [@TCA_NETEM_RATE={0x14, 0x6, {0x0, 0x2}}, @TCA_NETEM_CORR={0x10}, @TCA_NETEM_SLOT={0x2c}, @TCA_NETEM_CORRUPT={0xc}, @TCA_NETEM_JITTER64={0xc}, @TCA_NETEM_LOSS={0x6c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x24, 0x1, {0x0, 0x0, 0x0, 0xffffffff}}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x8}}, @NETEM_LOSS_GE={0x14}]}, @TCA_NETEM_CORR={0x10}, @TCA_NETEM_DELAY_DIST={0x53, 0x2, "bb31dd582025a5bfe05b342a891035fe2abd168e2c8b8d284dcd49405a3da4233a46fc0f50f25bb2abef41f435190e7d58e97dac5d759d1138e8b1e6821e0d9f9be0a90d6a87ad3aa42cf3624d64b1"}]}}}]}, 0x198}}, 0x0) bind$packet(r0, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$packet(r0, &(0x7f0000000080)="1555f6acfd136f8ed06375bd86dd", 0xe, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) 01:54:23 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0xc) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)="eb9441be58", 0x5, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 01:54:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x5b00, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:23 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x200000000000000}, 0x0) [ 2237.299367][ T8949] netlink: 'syz-executor.3': attribute type 4 has an invalid length. 01:54:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x4, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2237.511328][ T8952] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2237.538945][ T8955] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 01:54:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x9, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:24 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x300000000000000}, 0x0) 01:54:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x2, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x4, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:24 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0xc) (async, rerun: 64) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (rerun: 64) sendto$inet6(r0, &(0x7f0000000040)="eb9441be58", 0x5, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 01:54:24 executing program 1: getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x7, 0x2, [0x8001, 0x9]}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={r0, 0x1}, &(0x7f0000000100)=0x8) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000002ac0)={r1, 0xd2, 0x1, [0x40]}, &(0x7f0000002b00)=0xa) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0xc) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x3a1400, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000002840)={r0, 0x38, &(0x7f0000002800)=[@in6={0xa, 0x4e21, 0x0, @remote, 0x7ff}, @in6={0xa, 0x4e21, 0x100, @mcast2, 0xa6f}]}, &(0x7f0000002880)=0x10) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket$inet_sctp(0x2, 0x1, 0x84) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x0, 0x0) sync_file_range(r8, 0x0, 0x0, 0x1) ioctl$VIDIOC_ENUMAUDOUT(r8, 0xc0345642, &(0x7f0000003380)={0x3, "d90a88b3f2562a4a6cdfddee7a4279b07bd42d6acab79bcba568cee0a0ece1a4", 0x3, 0x1}) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x19, &(0x7f00000000c0)={r9}, 0x8) sendmmsg$inet_sctp(r4, &(0x7f0000003240)=[{&(0x7f0000000180)=@in6={0xa, 0x4e20, 0xa2, @private0, 0x41a7}, 0x1c, &(0x7f0000002400)=[{&(0x7f00000001c0)="85abb7947422377c2caec3489dfa8d3387d87c156913c5c0c58c6ec27e16fd75381a3b6c4972a7ab29a33df9d4ad10f38cfef058ef32995be9a1cfde6f23126c829c56216816aa3b522560dda0dde61ced99b71ae412a71e2312d2d605c900a8708a03519d78f1e3d8596b8d97eb6d250a23698d82", 0x75}, {&(0x7f0000000240)="4e129150ca26a7b15aa7221e3d1e588050fc07209226cbf04f272eeddac5da63d7cd142fc72ec28d3ef5c6003f91aee0f4f40706940345595f0d198d5a4c7f003b0a9dbb79a3c5173f63d6e7c1896cb9e24037d4f016e5ab60ec6a370da7a5666d19f419dea708cd453537447fc18a3d7111777f9bb7dc6b7376f1b40232ba", 0x7f}, {&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="9344eb046552084b0384b130a340c146710e14c163586991f6ed4e1d5034595e456822edfa9ad1411d0d41143342f455cba0cad6b500c11144d715758371e1bdae4b0be49f60bf0519", 0x49}, {&(0x7f0000001340)="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", 0x1000}, {&(0x7f0000002340)="389b5f8d321e6a0bb18a0213bec0e88e34af414f4fd2e033f00991d4b8af23c281e5069a5b834dc7acd960a22ae8c3a4d072f3fad0f1c655206ac0a8016b6d75600cafb8582e", 0x46}, {&(0x7f00000023c0)="58c55ca64fb9623478f2e972b74d03e70da9b1bd4ba260", 0x17}], 0x7, 0x0, 0x0, 0x10}, {&(0x7f0000002480)=@in6={0xa, 0x4e20, 0x56, @mcast2, 0x7}, 0x1c, &(0x7f00000027c0)=[{&(0x7f00000024c0)="85fe8a84b7f8d2c834bedc6d61eb92bf4e19c4af1c8d58ca98c646db511ec66e25798db36ab795fba5e5ae801e89917fe863613ce412eb9aa5c99b09aa9e572c026c0b6e7de8065b73b7957521486b53d8ab99749554be1563a9ab696341", 0x5e}, {&(0x7f0000002540)="c492f919c6096550e0df63814b1f1692f8ef7bf55cd8388e7410444ca90468cd0d2763b3795bb4e3f32973c7dca72a897b1911f92a87bf63e1570397070c532dddb8db35e0e64c9dd218987d8320b5e11adf17793edd0d4011791ca183723a6107150c63edaaaccbe8b3971a5bc3654c027c3f91658e5e6ee910257af0651b505b939a6971ec5fd319ee118b04ccf78c51327f1b3fcf2715cbf02736fbcfa9be87990ad003cfbd33f4a4d2028519d69bb42da67cdb089b9835821a7a4de4431f84796bb63f67dae47dd5e2e818f3d636ef96ded09f185367e9b9f795ebce87f36e3c7464bdac0222dec38a39662f3e18515d5f9993020c1a68", 0xf9}, {&(0x7f0000002640)="9cf5bd867b8abe37e61194cf76464205070e51c1f23d2a1041ba4a8018de143b3a87adf93c6588a56b6a8295b00e3f087d4a1cfbfafab693b89b3f0e0dc8fe1986d8d7d2e4807c5058994486bd6ef7fca941e88298b28c2f93a0f41717e0574081afcb6e6cdd8c4a843d1ba65e8451492ac857775164730f9b4603f512204ef7a78ee2cf58b30742a5244e47fd1ec067c93f", 0x92}, {&(0x7f0000002700)="4b9c2c3d299b82969ad318255f4f4454fe0be0be6ab7ebb99c621b31cbc17014a703ca79053a2aa854b181badd471844cc856cd8815854fb6afb0d63bf9c91236c861467fcb27d45ee4a57024e30597ac2aeb1034974c7cc3028a40fbda3866b128849e350a374b45290319cc5b43da3d515576b5b37cbf6d501e3255b43d64a2ba64b90", 0x84}], 0x4, &(0x7f00000028c0)=[@sndrcv={0x30, 0x84, 0x1, {0x680e, 0x6fb2, 0x204, 0x3, 0x3, 0x7fff, 0x8, 0x2, r5}}, @sndrcv={0x30, 0x84, 0x1, {0x6, 0x1, 0x206, 0xfff, 0x1, 0x3, 0xbd, 0x43951336, r0}}, @authinfo={0x18, 0x84, 0x6, {0x1}}], 0x78, 0x40000}, {&(0x7f0000002940)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10, &(0x7f0000002a80)=[{&(0x7f0000002980)="bdd5f800c6d0cb6b57794e23f9da828bf9deee802a5f3fb7f4662374b97c2a1f75e28c19", 0x24}, {&(0x7f00000029c0)="188655154a7360696a4952f06006f46c4d11504ec8687bc84fb5e1e6b26b96272ff93aaf53a2ac23612e7648faf9a449e9262ee76c54aede4dcfdd07479428ef0fbbf31f0e9ec29ee565010ba1a62e78969b15863c41602c0d2a90fde3a33d7433732cd9473ab72dea3ea20d0d847a09b30cb69c2a0d917d29e58d3e53a4527b9df6ac4d44698e905f5548d089ab5e37bf1d9f6e0376a5fc", 0x98}], 0x2, &(0x7f00000033c0)=ANY=[@ANYBLOB="18000000000000008400000000007b001a05dc00400000103000000000000000840000000100000007002d6f00000000020000000900000009000000ffffffd7719a6be63e38b3cce6b0ee7cff9cd7dd2d3b27bfbb985fb5ebaef729616ae8445a69473df3bd0ce5a1023ea3b09853087856806e474e376a1726d9a033b0d62fa8e1", @ANYRES32=r0, @ANYBLOB="20000000000000008400000002000000050000000300000002000000", @ANYRES32=r9], 0x68, 0x8000}, {&(0x7f0000002b40)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002f80)=[{&(0x7f0000002b80)="35b1824d1681cd6692f580098a8f690e4e89edaf598c845086879b84038491faff8c02140792b9a640f93c05b55c7dda23b79719c78580899e1c1338f58ecf4835aeddcc0b5c01d27e9ea642c6c1f75139d4af3c1d7598f5961877022946d156622747bc9679dbad12979cf103f42c3ad1b852281541e5ece19ec58179b5c8a254ff9d603cb5c94da908dc4959ea9f5dd85508954504f154c24d2a4c7985789c2a743db6c9caee513aeacf9fe418d7a5cd06875982e020724f9c3bd48ce7c6ca3eb9cbff575ddb86d984d9639ba2f5c42bfc07ee75e0b4aad21746", 0xdb}, {&(0x7f0000002c80)="6047c479690add4d9313ed2d1f9cc58adff99906f77964da6abb5f14119a24265a59188fe74b11b0b7208bdc0d6073acb3ae3c397eaca7df6920414de66b80a04f8c8bef37a45f4f5125a9d80c1aef8d519b8d8b327895464e96ae901ce90baecc24fc937f71f47e58a759090f2bdabc3ae949e78d4648060ae7bee89f7a6db5c4b912db89b46f2d37e8b708476bb112078c8023d97c1c195b093d973ea7df283c0b4b2102d647f1203164ab8b60a39ab761ceeee9a21825bda54be8ee22a838f9559762653e67fb3b9c23b5200bc978cb94dc960288774fe97269c6adcd4c", 0xdf}, {&(0x7f0000002d80)="c3944dbdefd2e16995b44a294556b558b101bb1d4860f2476ede0e19b6e99d6a15a1a077dcca2397759658bafe9fffeb3407ec20a96a4e56d49e092f2b44b2da4c7f1495735b82", 0x47}, {&(0x7f0000002e00)="bfbfe35ae95f1c65913be81880325b06903b9d1828c5c180648bf2be3a5cbd372cfbbf82aae7918dde21986311fc036e2e224d814abe8363704276334ff74eabe6f10aedd59349e0c53864cee12c6b5503ba1e9398709acb35a3c8166d9cdc3ef2290ad6c41242008be341f37dbe6f528d4bef430c06198238e10fd6bf9b027a9df4045d0260c3e33aca5bc77abf4e78e381ef72e2ed10acbaf4ff1af83b43f12ab4e4a08a3229479e82b4fff1", 0xad}, {&(0x7f0000002ec0)="b849529bce2ebb2452990252fcfc0a05b8b1c279beb9ff16bc63fed5bfc2085b36c4de0ef80a584e61f7d312ae9c504b286703564776c01d36e67bce1ee6e5a0e3d13f773b2a5f72beb6ea98bc8840a43ded4703ea7fe1d4d9977593ced28c52824ca6aa252719e865e898c49f5ab735692bdd92dc53c2c96eda6ba6690c74048fc5db20c96e61fb97bc6e2b76ff29230af3ac2c7ae3c57addd41c", 0x9b}], 0x5, 0x0, 0x0, 0x4000080}, {&(0x7f0000003000)=@in6={0xa, 0x4e22, 0x295, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1}, 0x1c, &(0x7f0000003200)=[{&(0x7f0000003040)="72ca5a6350027aa4ea32921927977c6d7cd941de9a924bfbcd275d6c6d2c1e64a8a3d082fff443552e48b36ed4c85da3be3d295c2bd49df303fb0901b624e26c976aa8599d0db3fb0eb0ebe8a8dafd06695b59274f5195a16fb25d5c3a9349ad98d9fe8409da02ec04541f06246d93bcd95e956fc7f842f07a1c91b7fa843e6dd0a0fcabdfd8255c9ee1b76a419c05abac490b0b17c162fb3505d40b254fed718a712f4aad132f92c869", 0xaa}, {&(0x7f0000003100)="86d77bc7a35c03d629d406ad498b0c0d39c54e20147afdf1f562404aa48f3edfa3ccbe8e64da0bfe754e1b4127bc814a9d325236375f07c763d90f50309fd0055ccb1f296501c46353b56c14ef694d4a7399b453908f9803540ea46a9cbd8ef5e617be6a", 0x64}, {&(0x7f0000003180)="f5dee19b3c4d438e1c95c59fbbfe230061fe028e71007655ba19120f6e957964cbdfb97bb9fd29e0da2acc18c151d699f6f70a41bb1a69a6def5170c776e2fba9c9d", 0x42}], 0x3, 0x0, 0x0, 0x8004}], 0x5, 0x10) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x54) openat$hwrng(0xffffffffffffff9c, &(0x7f0000003480), 0xa0000, 0x0) [ 2237.985187][ T8966] netlink: 'syz-executor.3': attribute type 4 has an invalid length. 01:54:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x3, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:24 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x400000000000000}, 0x0) 01:54:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0xa, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x4, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:24 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0xc) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)="eb9441be58", 0x5, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0xc) (async) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000000040)="eb9441be58", 0x5, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) [ 2238.414996][ T8979] netlink: 'syz-executor.3': attribute type 4 has an invalid length. 01:54:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x5, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:25 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@newqdisc={0x198, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8}}, @qdisc_kind_options=@q_netem={{0xa}, {0x154, 0x2, {{0x0, 0x0, 0x0, 0x0, 0xfffffffb}, [@TCA_NETEM_RATE={0x14, 0x6, {0x0, 0x2}}, @TCA_NETEM_CORR={0x10}, @TCA_NETEM_SLOT={0x2c}, @TCA_NETEM_CORRUPT={0xc}, @TCA_NETEM_JITTER64={0xc}, @TCA_NETEM_LOSS={0x6c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x24, 0x1, {0x0, 0x0, 0x0, 0xffffffff}}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x8}}, @NETEM_LOSS_GE={0x14}]}, @TCA_NETEM_CORR={0x10}, @TCA_NETEM_DELAY_DIST={0x53, 0x2, "bb31dd582025a5bfe05b342a891035fe2abd168e2c8b8d284dcd49405a3da4233a46fc0f50f25bb2abef41f435190e7d58e97dac5d759d1138e8b1e6821e0d9f9be0a90d6a87ad3aa42cf3624d64b1"}]}}}]}, 0x198}}, 0x0) bind$packet(r0, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$packet(r0, &(0x7f0000000080)="1555f6acfd136f8ed06375bd86dd", 0xe, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) 01:54:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x500000000000000}, 0x0) 01:54:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0xb, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:25 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x4, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:25 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0xc) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004440)={0x3c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x3c}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'batadv0\x00', {0x2, 0x4e22, @broadcast}}) [ 2238.901409][ T8992] netlink: 'syz-executor.3': attribute type 4 has an invalid length. 01:54:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x6, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x600000000000000}, 0x0) 01:54:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0xc, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:25 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0xc) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0xc) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004440)={0x3c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x3c}}, 0x0) (async) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004440)={0x3c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x3c}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'batadv0\x00', {0x2, 0x4e22, @broadcast}}) 01:54:25 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@newqdisc={0x198, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8}}, @qdisc_kind_options=@q_netem={{0xa}, {0x154, 0x2, {{0x0, 0x0, 0x0, 0x0, 0xfffffffb}, [@TCA_NETEM_RATE={0x14, 0x6, {0x0, 0x2}}, @TCA_NETEM_CORR={0x10}, @TCA_NETEM_SLOT={0x2c}, @TCA_NETEM_CORRUPT={0xc}, @TCA_NETEM_JITTER64={0xc}, @TCA_NETEM_LOSS={0x6c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x24, 0x1, {0x0, 0x0, 0x0, 0xffffffff}}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x8}}, @NETEM_LOSS_GE={0x14}]}, @TCA_NETEM_CORR={0x10}, @TCA_NETEM_DELAY_DIST={0x53, 0x2, "bb31dd582025a5bfe05b342a891035fe2abd168e2c8b8d284dcd49405a3da4233a46fc0f50f25bb2abef41f435190e7d58e97dac5d759d1138e8b1e6821e0d9f9be0a90d6a87ad3aa42cf3624d64b1"}]}}}]}, 0x198}}, 0x0) bind$packet(r0, 0x0, 0x0) sendto$packet(r0, &(0x7f0000000080)="1555f6acfd136f8ed06375bd86dd", 0xe, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) 01:54:25 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x4, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x700000000000000}, 0x0) [ 2239.408957][ T9002] netlink: 'syz-executor.3': attribute type 4 has an invalid length. 01:54:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x7, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x10, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:26 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x800000000000000}, 0x0) 01:54:26 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x4, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2239.798604][ T9015] netlink: 'syz-executor.3': attribute type 4 has an invalid length. 01:54:26 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0xc) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004440)={0x3c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x3c}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'batadv0\x00', {0x2, 0x4e22, @broadcast}}) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0xc) (async) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004440)={0x3c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x3c}}, 0x0) (async) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'batadv0\x00', {0x2, 0x4e22, @broadcast}}) (async) [ 2239.847935][ T9011] __nla_validate_parse: 5 callbacks suppressed [ 2239.847999][ T9011] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 01:54:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x8, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x11, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:26 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@newqdisc={0x198, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8}}, @qdisc_kind_options=@q_netem={{0xa}, {0x154, 0x2, {{0x0, 0x0, 0x0, 0x0, 0xfffffffb}, [@TCA_NETEM_RATE={0x14, 0x6, {0x0, 0x2}}, @TCA_NETEM_CORR={0x10}, @TCA_NETEM_SLOT={0x2c}, @TCA_NETEM_CORRUPT={0xc}, @TCA_NETEM_JITTER64={0xc}, @TCA_NETEM_LOSS={0x6c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x24, 0x1, {0x0, 0x0, 0x0, 0xffffffff}}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x8}}, @NETEM_LOSS_GE={0x14}]}, @TCA_NETEM_CORR={0x10}, @TCA_NETEM_DELAY_DIST={0x53, 0x2, "bb31dd582025a5bfe05b342a891035fe2abd168e2c8b8d284dcd49405a3da4233a46fc0f50f25bb2abef41f435190e7d58e97dac5d759d1138e8b1e6821e0d9f9be0a90d6a87ad3aa42cf3624d64b1"}]}}}]}, 0x198}}, 0x0) bind$packet(r0, 0x0, 0x0) sendto$packet(r0, &(0x7f0000000080)="1555f6acfd136f8ed06375bd86dd", 0xe, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) 01:54:26 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x900000000000000}, 0x0) [ 2240.290862][ T9025] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 01:54:26 executing program 0: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x4, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r0}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x14, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x9, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2240.620421][ T9033] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 01:54:27 executing program 0: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x4, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r0}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:27 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004440)=ANY=[@ANYBLOB="67a73000", @ANYRES16=r2, @ANYBLOB="010000000089400000006600000008000300", @ANYRES32=r3, @ANYRES64=r2], 0x38}}, 0x800) dup3(r0, r1, 0x80000) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) [ 2240.712277][ T9041] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 01:54:27 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0xa00000000000000}, 0x0) 01:54:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x15, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0xa, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:27 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x0, 0x0) sync_file_range(r1, 0x0, 0x0, 0x1) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000040), &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0xc) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 01:54:27 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0xb00000000000000}, 0x0) 01:54:27 executing program 0: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x4, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r0}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2241.194301][ T9050] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 01:54:27 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0xc) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004440)=ANY=[@ANYBLOB="67a73000", @ANYRES16=r2, @ANYBLOB="010000000089400000006600000008000300", @ANYRES32=r3, @ANYRES64=r2], 0x38}}, 0x800) (async) dup3(r0, r1, 0x80000) (async) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 01:54:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0xb, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2241.404583][ T1211] ieee802154 phy0 wpan0: encryption failed: -22 [ 2241.412289][ T1211] ieee802154 phy1 wpan1: encryption failed: -22 01:54:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x29, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:28 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0xc00000000000000}, 0x0) 01:54:28 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@newqdisc={0x16c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8}}, @qdisc_kind_options=@q_netem={{0xa}, {0x128, 0x2, {{0x0, 0x0, 0x0, 0x0, 0xfffffffb}, [@TCA_NETEM_RATE={0x14, 0x6, {0x0, 0x2}}, @TCA_NETEM_CORR={0x10}, @TCA_NETEM_CORRUPT={0xc}, @TCA_NETEM_JITTER64={0xc}, @TCA_NETEM_LOSS={0x6c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x0, 0x0, 0xffffffff}}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x8}}, @NETEM_LOSS_GE={0x14}]}, @TCA_NETEM_CORR={0x10}, @TCA_NETEM_DELAY_DIST={0x53, 0x2, "bb31dd582025a5bfe05b342a891035fe2abd168e2c8b8d284dcd49405a3da4233a46fc0f50f25bb2abef41f435190e7d58e97dac5d759d1138e8b1e6821e0d9f9be0a90d6a87ad3aa42cf3624d64b1"}]}}}]}, 0x16c}}, 0x0) bind$packet(r0, &(0x7f0000000400)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$packet(r0, &(0x7f0000000080)="1555f6acfd136f8ed06375bd86dd", 0xe, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) 01:54:28 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0xc) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004440)=ANY=[@ANYBLOB="67a73000", @ANYRES16=r2, @ANYBLOB="010000000089400000006600000008000300", @ANYRES32=r3, @ANYRES64=r2], 0x38}}, 0x800) dup3(r0, r1, 0x80000) (async) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 01:54:28 executing program 0: socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x4, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r0}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2241.754928][ T9066] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 01:54:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0xc, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2241.850651][ T9070] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 01:54:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x3b, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:28 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0xd00000000000000}, 0x0) 01:54:28 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0xc) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0xc881, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @private2, 0xfffffffd}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)="30af7258d5b07093224feaca156e1e2bf96c9261d731d85777e563f134306662268378e5ac42a3ef496e39b48f31cbc4ebd4528930d7ef5c32cba028ae9ebcb7831663450d407195348871b61798076a3ed4b07dae8973f5184426f41c2cb1280119562bb19e23960b71ad32333386d38778caa92171725c9bc26b76a2112d07c9b8764f893080934bfdd771fd5924299208186def5ee2fe7e1e3b2d8d59d7face3a12e2833102b014269aa13af1f7ab6f1d72d7a1f7ab06bdaed1f42f670d5bce713fd32fea2c60a8280462589c024d66006f05a6e9e8c547f26eb2bcff7024297f", 0xe2, 0x44, &(0x7f0000000140)={0xa, 0x4e20, 0xdbb, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) 01:54:28 executing program 0: socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x4, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r0}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2242.257597][ T9082] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 01:54:28 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004440)={0x3c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x3c}}, 0x0) write$binfmt_elf64(r1, &(0x7f0000000040)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x40, 0x9, 0x4, 0x9, 0x7, 0x3, 0x20, 0x1ed, 0x40, 0x2de, 0x3c, 0x5, 0x38, 0x1, 0xc4c, 0x35ab, 0x1}, [{0x2, 0x9, 0x5, 0x0, 0x6, 0x1, 0x4133, 0x9}, {0x6474e551, 0x3f, 0x7, 0x20, 0x2, 0x2, 0x6, 0x80000000}], "381198cd803da297a2b6387447f95959d24650cdd407aa343920c1d04a3fb759c44d01209ddf9912870e5fe2f23e71ac296185aa5a0fa1fded4ce7b979f166e32c2a99db8ca566c751e0621b9b03f29c56078036e2d314640413"}, 0x10a) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0xc) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000001c0)=0x14) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 01:54:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0xd, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x5100, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0xe00000000000000}, 0x0) 01:54:29 executing program 0: socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x4, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r0}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:29 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0xc) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0xc) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0xc881, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @private2, 0xfffffffd}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)="30af7258d5b07093224feaca156e1e2bf96c9261d731d85777e563f134306662268378e5ac42a3ef496e39b48f31cbc4ebd4528930d7ef5c32cba028ae9ebcb7831663450d407195348871b61798076a3ed4b07dae8973f5184426f41c2cb1280119562bb19e23960b71ad32333386d38778caa92171725c9bc26b76a2112d07c9b8764f893080934bfdd771fd5924299208186def5ee2fe7e1e3b2d8d59d7face3a12e2833102b014269aa13af1f7ab6f1d72d7a1f7ab06bdaed1f42f670d5bce713fd32fea2c60a8280462589c024d66006f05a6e9e8c547f26eb2bcff7024297f", 0xe2, 0x44, &(0x7f0000000140)={0xa, 0x4e20, 0xdbb, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) [ 2242.816389][ T9097] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 01:54:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0xe, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0xf00000000000000}, 0x0) 01:54:29 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@newqdisc={0x18c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8}}, @qdisc_kind_options=@q_netem={{0xa}, {0x148, 0x2, {{0x0, 0x0, 0x0, 0x0, 0xfffffffb}, [@TCA_NETEM_RATE={0x14, 0x6, {0x0, 0x2}}, @TCA_NETEM_CORR={0x10}, @TCA_NETEM_SLOT={0x2c}, @TCA_NETEM_CORRUPT={0xc}, @TCA_NETEM_LOSS={0x6c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x0, 0x0, 0xffffffff}}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x8}}, @NETEM_LOSS_GE={0x14}]}, @TCA_NETEM_CORR={0x10}, @TCA_NETEM_DELAY_DIST={0x53, 0x2, "bb31dd582025a5bfe05b342a891035fe2abd168e2c8b8d284dcd49405a3da4233a46fc0f50f25bb2abef41f435190e7d58e97dac5d759d1138e8b1e6821e0d9f9be0a90d6a87ad3aa42cf3624d64b1"}]}}}]}, 0x18c}}, 0x0) bind$packet(r0, &(0x7f0000000400)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$packet(r0, &(0x7f0000000080)="1555f6acfd136f8ed06375bd86dd", 0xe, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) 01:54:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x4, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x5b00, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:29 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0xc) (async) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0xc881, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @private2, 0xfffffffd}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)="30af7258d5b07093224feaca156e1e2bf96c9261d731d85777e563f134306662268378e5ac42a3ef496e39b48f31cbc4ebd4528930d7ef5c32cba028ae9ebcb7831663450d407195348871b61798076a3ed4b07dae8973f5184426f41c2cb1280119562bb19e23960b71ad32333386d38778caa92171725c9bc26b76a2112d07c9b8764f893080934bfdd771fd5924299208186def5ee2fe7e1e3b2d8d59d7face3a12e2833102b014269aa13af1f7ab6f1d72d7a1f7ab06bdaed1f42f670d5bce713fd32fea2c60a8280462589c024d66006f05a6e9e8c547f26eb2bcff7024297f", 0xe2, 0x44, &(0x7f0000000140)={0xa, 0x4e20, 0xdbb, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) 01:54:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x10, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x1000000000000000}, 0x0) [ 2243.235467][ T9109] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 01:54:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x4, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:30 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0xffffffffffffffff) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept4$inet6(r1, 0x0, 0x0, 0x0) 01:54:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x2, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:30 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@newqdisc={0x18c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8}}, @qdisc_kind_options=@q_netem={{0xa}, {0x148, 0x2, {{0x0, 0x0, 0x0, 0x0, 0xfffffffb}, [@TCA_NETEM_RATE={0x14, 0x6, {0x0, 0x2}}, @TCA_NETEM_CORR={0x10}, @TCA_NETEM_SLOT={0x2c}, @TCA_NETEM_CORRUPT={0xc}, @TCA_NETEM_LOSS={0x6c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x0, 0x0, 0xffffffff}}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x8}}, @NETEM_LOSS_GE={0x14}]}, @TCA_NETEM_CORR={0x10}, @TCA_NETEM_DELAY_DIST={0x53, 0x2, "bb31dd582025a5bfe05b342a891035fe2abd168e2c8b8d284dcd49405a3da4233a46fc0f50f25bb2abef41f435190e7d58e97dac5d759d1138e8b1e6821e0d9f9be0a90d6a87ad3aa42cf3624d64b1"}]}}}]}, 0x18c}}, 0x0) bind$packet(r0, &(0x7f0000000400)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$packet(r0, &(0x7f0000000080)="1555f6acfd136f8ed06375bd86dd", 0xe, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) 01:54:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x11, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:30 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x1100000000000000}, 0x0) 01:54:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x4, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x4, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x3, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x12, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:30 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x1200000000000000}, 0x0) 01:54:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x4, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:30 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_io_uring_complete(0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000000)={0x7ff, 0x5, 0x200, 0xffe4, 0x33cc41c6, 0x4, 0x7, 0x8000}, 0x20) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000040)=0xfc, 0x4) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080), 0xc) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$MRT6(r0, 0x29, 0xcf, &(0x7f00000000c0), &(0x7f0000000100)=0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000140), 0x4) 01:54:31 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0xc) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0xff0f0000}, 0x1c) 01:54:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x1e, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x5, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:31 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x2500000000000000}, 0x0) 01:54:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x4, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:31 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0xc) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0xfe80ffff}, 0x1c) 01:54:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) 01:54:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x6, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:31 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x3f00000000000000}, 0x0) 01:54:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x64, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:31 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept4$inet6(r1, 0x0, 0x0, 0x0) 01:54:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) 01:54:32 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0xc) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0xf0000000}, 0x1c) 01:54:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x7, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:32 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x4800000000000000}, 0x0) 01:54:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x104, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) 01:54:32 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x4c00000000000000}, 0x0) 01:54:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x8, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x303, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:32 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@newqdisc={0x198, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8}}, @qdisc_kind_options=@q_netem={{0xa}, {0x154, 0x2, {{0x0, 0x0, 0x0, 0x0, 0xfffffffb}, [@TCA_NETEM_RATE={0x14, 0x6, {0x0, 0x2}}, @TCA_NETEM_CORR={0x10}, @TCA_NETEM_SLOT={0x2c}, @TCA_NETEM_CORRUPT={0xc}, @TCA_NETEM_JITTER64={0xc}, @TCA_NETEM_LOSS={0x6c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x24, 0x1, {0x0, 0x0, 0x0, 0xffffffff}}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x8}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x0, 0x0, 0x1}}]}, @TCA_NETEM_CORR={0x10}, @TCA_NETEM_DELAY_DIST={0x53, 0x2, "bb31dd582025a5bfe05b342a891035fe2abd168e2c8b8d284dcd49405a3da4233a46fc0f50f25bb2abef41f435190e7d58e97dac5d759d1138e8b1e6821e0d9f9be0a90d6a87ad3aa42cf3624d64b1"}]}}}]}, 0x198}}, 0x0) bind$packet(r0, &(0x7f0000000400)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$packet(r0, &(0x7f0000000080)="1555f6acfd136f8ed06375bd86dd", 0xe, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) 01:54:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) [ 2246.338989][ T9190] __nla_validate_parse: 2 callbacks suppressed [ 2246.339058][ T9190] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 01:54:32 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@newqdisc={0x184, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8}}, @qdisc_kind_options=@q_netem={{0xa}, {0x140, 0x2, {{0x0, 0x0, 0x0, 0x0, 0xfffffffb}, [@TCA_NETEM_RATE={0x14, 0x6, {0x0, 0x2}}, @TCA_NETEM_CORR={0x10}, @TCA_NETEM_SLOT={0x2c}, @TCA_NETEM_CORRUPT={0xc}, @TCA_NETEM_JITTER64={0xc}, @TCA_NETEM_LOSS={0x58, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x0, 0x0, 0xffffffff}}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x8}}]}, @TCA_NETEM_CORR={0x10}, @TCA_NETEM_DELAY_DIST={0x53, 0x2, "bb31dd582025a5bfe05b342a891035fe2abd168e2c8b8d284dcd49405a3da4233a46fc0f50f25bb2abef41f435190e7d58e97dac5d759d1138e8b1e6821e0d9f9be0a90d6a87ad3aa42cf3624d64b1"}]}}}]}, 0x184}}, 0x0) bind$packet(r0, &(0x7f0000000400)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$packet(r0, &(0x7f0000000080)="1555f6acfd136f8ed06375bd86dd", 0xe, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) 01:54:32 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x6000000000000000}, 0x0) 01:54:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x9, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x403, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) [ 2246.745516][ T9197] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 01:54:33 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@newqdisc={0x188, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8}}, @qdisc_kind_options=@q_netem={{0xa}, {0x144, 0x2, {{0x0, 0x0, 0x0, 0x0, 0xfffffffb}, [@TCA_NETEM_RATE={0x14, 0x6, {0x0, 0x2}}, @TCA_NETEM_CORR={0x10}, @TCA_NETEM_SLOT={0x2c}, @TCA_NETEM_CORRUPT={0xc}, @TCA_NETEM_JITTER64={0xc}, @TCA_NETEM_LOSS={0x6c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x0, 0x0, 0xffffffff}}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x8}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x0, 0x62, 0x1}}]}, @TCA_NETEM_DELAY_DIST={0x53, 0x2, "bb31dd582025a5bfe05b342a891035fe2abd168e2c8b8d284dcd49405a3da4233a46fc0f50f25bb2abef41f435190e7d58e97dac5d759d1138e8b1e6821e0d9f9be0a90d6a87ad3aa42cf3624d64b1"}]}}}]}, 0x188}}, 0x0) bind$packet(r0, &(0x7f0000000400)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$packet(r0, &(0x7f0000000080)="1555f6acfd136f8ed06375bd86dd", 0xe, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) 01:54:33 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x6558000000000000}, 0x0) 01:54:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x503, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0xa, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 01:54:33 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x6800000000000000}, 0x0) 01:54:33 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@newqdisc={0x188, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8}}, @qdisc_kind_options=@q_netem={{0xa}, {0x144, 0x2, {{0x0, 0x0, 0x0, 0x0, 0xfffffffb}, [@TCA_NETEM_RATE={0x14, 0x6, {0x0, 0x2}}, @TCA_NETEM_CORR={0x10}, @TCA_NETEM_SLOT={0x2c}, @TCA_NETEM_CORRUPT={0xc}, @TCA_NETEM_JITTER64={0xc}, @TCA_NETEM_LOSS={0x6c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x0, 0x0, 0xffffffff}}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x8}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x0, 0x62, 0x1}}]}, @TCA_NETEM_DELAY_DIST={0x53, 0x2, "bb31dd582025a5bfe05b342a891035fe2abd168e2c8b8d284dcd49405a3da4233a46fc0f50f25bb2abef41f435190e7d58e97dac5d759d1138e8b1e6821e0d9f9be0a90d6a87ad3aa42cf3624d64b1"}]}}}]}, 0x188}}, 0x0) bind$packet(r0, &(0x7f0000000400)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$packet(r0, &(0x7f0000000080)="1555f6acfd136f8ed06375bd86dd", 0xe, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) [ 2247.295761][ T9209] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 01:54:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0xb, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x1202, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) [ 2247.588858][ T9217] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 01:54:34 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x6c00000000000000}, 0x0) 01:54:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0xc, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4002, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xc00}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}}, 0x0) 01:54:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 01:54:34 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = accept4$inet6(r1, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000040)='I', 0x1, 0x0, 0x0, 0x0) 01:54:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4003, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:34 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x7400000000000000}, 0x0) [ 2248.210370][ T9233] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2248.217928][ T9233] IPv6: NLM_F_CREATE should be set when creating new route 01:54:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0xd, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2248.269130][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. 01:54:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 01:54:34 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = accept4$inet6(r1, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000040)='I', 0x1, 0x0, 0x0, 0x0) 01:54:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = accept4$inet6(r1, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000040), 0x0, 0x41, 0x0, 0x0) 01:54:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x8002, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:35 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x7421000000000000}, 0x0) 01:54:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0xe, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2248.786696][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. 01:54:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x0, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x4, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2248.902870][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. 01:54:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = accept4$inet6(r1, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000040), 0x0, 0x41, 0x0, 0x0) 01:54:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x10, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:35 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x7a00000000000000}, 0x0) 01:54:35 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = accept4$inet6(r1, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000040)='I', 0x1, 0x0, 0x0, 0x0) 01:54:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x8003, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2249.336308][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. 01:54:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x0, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x4, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:35 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x8100000000000000}, 0x0) 01:54:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x11, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2249.498892][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. 01:54:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = accept4$inet6(r1, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000040), 0x0, 0x41, 0x0, 0x0) 01:54:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0xc002, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept4$inet6(r1, 0x0, 0x0, 0x0) [ 2249.832642][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. 01:54:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x0, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x4, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:36 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x820d000000000000}, 0x0) 01:54:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x12, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept4$inet6(r1, 0x0, 0x0, 0x0) [ 2249.997321][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. 01:54:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0xc003, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 01:54:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x3c, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}]}, 0x3c}}, 0x0) 01:54:36 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x8847000000000000}, 0x0) 01:54:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x1e, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x4, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2250.433134][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2250.448707][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. 01:54:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 01:54:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) [ 2250.745125][ T9296] netlink: 'syz-executor.2': attribute type 21 has an invalid length. 01:54:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x8848000000000000}, 0x0) 01:54:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x3c, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}]}, 0x3c}}, 0x0) [ 2250.907244][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. 01:54:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x104, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x8, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 01:54:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 01:54:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x3c, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}]}, 0x3c}}, 0x0) [ 2251.337605][ T9312] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 2251.346568][ T9312] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2251.355116][ T9312] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0xc403, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 01:54:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x88a8ffff00000000}, 0x0) 01:54:38 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 01:54:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x10, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x4, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6}]}, 0x44}}, 0x0) 01:54:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0xc503, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0xe0ffffff00000000}, 0x0) 01:54:38 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 01:54:38 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) [ 2251.992498][ T9326] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 01:54:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x1e, 0x7}]}, 0x44}}, 0x0) 01:54:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x4, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6}]}, 0x44}}, 0x0) 01:54:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0xc603, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0) 01:54:38 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) [ 2252.389352][ T9338] netlink: 'syz-executor.2': attribute type 30 has an invalid length. 01:54:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 01:54:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x4}]}, 0x44}}, 0x0) 01:54:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x4, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6}]}, 0x44}}, 0x0) 01:54:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0xc703, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2252.802933][ T9350] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2252.811579][ T9350] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2252.819025][ T9350] IPv6: NLM_F_CREATE should be set when creating new route 01:54:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0xfc00000000000000}, 0x0) 01:54:39 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 01:54:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 01:54:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x10}]}, 0x44}}, 0x0) 01:54:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x3c, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x3c}}, 0x0) 01:54:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0xca03, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0xfdffffff00000000}, 0x0) 01:54:40 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 01:54:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x10}}, 0x0) 01:54:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x3c, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x3c}}, 0x0) 01:54:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 01:54:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0xcb03, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0xfe80ffff00000000}, 0x0) 01:54:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x1c}}, 0x0) 01:54:40 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 01:54:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x3c, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x3c}}, 0x0) 01:54:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 01:54:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x2, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0xfec0ffff00000000}, 0x0) 01:54:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x140}}, 0x0) [ 2254.574139][ T9389] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 01:54:41 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) [ 2254.770147][ T9394] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2254.778602][ T9394] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x4, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 01:54:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x4, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:41 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0xff00000000000000}, 0x0) 01:54:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0xec1}}, 0x0) [ 2255.100247][ T9400] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 2255.186937][ T9405] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2255.201189][ T9405] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x5, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:41 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 01:54:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 01:54:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x4, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:41 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) 01:54:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x33fe0}}, 0x0) [ 2255.493776][ T9409] netlink: 'syz-executor.3': attribute type 21 has an invalid length. 01:54:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x4, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:42 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 01:54:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x8, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2255.763093][ T9418] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2255.772163][ T9418] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0xffffffff00000000}, 0x0) 01:54:42 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 01:54:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0xfffffdef}}, 0x0) [ 2255.977792][ T9422] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 2255.986675][ T9422] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2255.995398][ T9422] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x2c, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x2c}}, 0x0) 01:54:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x10, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:42 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 01:54:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0xffffffffff600000}, 0x0) 01:54:42 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 01:54:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x2}, 0x0) [ 2256.361374][ T9432] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x2c, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x2c}}, 0x0) [ 2256.499262][ T9436] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2256.635561][ T9441] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2256.646707][ T9441] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}}, 0x0) 01:54:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x1e, 0x7}]}, 0x44}}, 0x0) 01:54:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0xa}, 0x0) 01:54:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 01:54:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) [ 2256.904770][ T9444] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2257.035701][ T9449] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x2c, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x2c}}, 0x0) [ 2257.086560][ T9451] netlink: 'syz-executor.3': attribute type 30 has an invalid length. 01:54:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0xb}, 0x0) 01:54:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 01:54:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x0) 01:54:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x4}]}, 0x44}}, 0x0) [ 2257.381170][ T9456] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 01:54:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x4, 0x1, {{0x0, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2257.544927][ T9463] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x10}, 0x0) [ 2257.591139][ T9464] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2257.599901][ T9464] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2257.607316][ T9464] IPv6: NLM_F_CREATE should be set when creating new route 01:54:44 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 01:54:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x3}, 0x0) 01:54:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x10}]}, 0x44}}, 0x0) [ 2257.872171][ T9469] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 01:54:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x14}, 0x0) [ 2257.982223][ T9474] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 01:54:44 executing program 5: close(0xffffffffffffffff) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 01:54:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 01:54:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 01:54:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x10}}, 0x0) 01:54:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) [ 2258.467821][ T9485] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x25}, 0x0) 01:54:45 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 01:54:45 executing program 5: close(0xffffffffffffffff) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 01:54:45 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) 01:54:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x1c}}, 0x0) 01:54:45 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) [ 2258.927056][ T9498] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x6000}, 0x0) 01:54:45 executing program 5: close(0xffffffffffffffff) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 01:54:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x4}]}, 0x44}}, 0x0) 01:54:45 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x6}, 0x0) 01:54:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x140}}, 0x0) [ 2259.352919][ T9506] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x7ffffff2}, 0x0) [ 2259.408524][ T9511] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2259.417201][ T9511] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2259.424747][ T9511] IPv6: NLM_F_CREATE should be set when creating new route [ 2259.434793][ T9512] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2259.443485][ T9512] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x7}, 0x0) 01:54:46 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 01:54:46 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0xffffffffffffffff) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 01:54:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0xec1}}, 0x0) 01:54:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x4}]}, 0x44}}, 0x0) [ 2259.823408][ T9517] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2259.832818][ T9519] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2259.845163][ T9519] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x7ffffff8}, 0x0) [ 2259.917106][ T9524] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8}, 0x0) 01:54:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x33fe0}}, 0x0) 01:54:46 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 01:54:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x4}]}, 0x44}}, 0x0) 01:54:46 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0xffffffffffffffff) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) [ 2260.248933][ T9529] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x7ffffff9}, 0x0) [ 2260.335630][ T9533] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x9}, 0x0) 01:54:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0xfffffdef}}, 0x0) 01:54:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0xffffffffffffffff) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 01:54:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0xffffffffffffffff) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 01:54:47 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@newqdisc={0x194, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8}}, @qdisc_kind_options=@q_netem={{0xa}, {0x150, 0x2, {{0x0, 0x0, 0x0, 0x0, 0xfffffffb}, [@TCA_NETEM_RATE={0x14, 0x6, {0x0, 0x2}}, @TCA_NETEM_CORR={0x10}, @TCA_NETEM_SLOT={0x2c}, @TCA_NETEM_CORRUPT={0xc}, @TCA_NETEM_JITTER64={0xc}, @TCA_NETEM_LOSS={0x6c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x0, 0x0, 0xffffffff}}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x8}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x0, 0x62, 0x1}}]}, @TCA_NETEM_CORR={0x10}, @TCA_NETEM_DELAY_DIST={0x4f, 0x2, "bb31dd582025a5bfe05b342a891035fe2abd168e2c8b8d284dcd49405a3da4233a46fc0f50f25bb2abef41f435190e7d58e97dac5d759d1138e8b1e6821e0d9f9be0a90d6a87ad3aa42cf3"}]}}}]}, 0x194}}, 0x0) bind$packet(r0, &(0x7f0000000400)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$packet(r0, &(0x7f0000000080)="1555f6acfd136f8ed06375bd86dd", 0xe, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) 01:54:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0xfffffffd}, 0x0) [ 2260.702788][ T9542] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0xa}, 0x0) 01:54:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x2}, 0x0) [ 2260.999314][ T9549] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 01:54:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x2}, 0x0) 01:54:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 01:54:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0xffffffffffffffff) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) [ 2261.248884][ T9556] validate_nla: 2 callbacks suppressed [ 2261.249039][ T9556] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2261.263545][ T9556] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2261.286130][ T9557] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2261.397098][ T9559] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2261.405724][ T9559] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0xb}, 0x0) 01:54:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0xa}, 0x0) 01:54:48 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@newqdisc={0x144, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8}}, @qdisc_kind_options=@q_netem={{0xa}, {0x100, 0x2, {{0x0, 0x0, 0x0, 0x0, 0xfffffffb}, [@TCA_NETEM_RATE={0x14, 0x6, {0x0, 0x2}}, @TCA_NETEM_CORR={0x10}, @TCA_NETEM_SLOT={0x2c}, @TCA_NETEM_CORRUPT={0xc}, @TCA_NETEM_JITTER64={0xc}, @TCA_NETEM_LOSS={0x6c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x0, 0x0, 0xffffffff}}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x8}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x0, 0x62, 0x1}}]}, @TCA_NETEM_CORR={0x10}]}}}]}, 0x144}}, 0x0) bind$packet(r0, &(0x7f0000000400)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$packet(r0, &(0x7f0000000080)="1555f6acfd136f8ed06375bd86dd", 0xe, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) 01:54:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x3}, 0x0) 01:54:48 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) [ 2261.694701][ T9567] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0xffffffffffffffff) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) [ 2261.860912][ T9572] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2261.869350][ T9572] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2261.902678][ T9571] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 01:54:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc}, 0x0) 01:54:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0xb}, 0x0) 01:54:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x4}, 0x0) [ 2262.132885][ T9578] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 01:54:48 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 01:54:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0xd}, 0x0) [ 2262.304424][ T9582] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2262.314400][ T9582] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x10}, 0x0) 01:54:48 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@newqdisc={0x38, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8}}]}, 0x38}}, 0x0) bind$packet(r0, &(0x7f0000000400)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$packet(r0, &(0x7f0000000080)="1555f6acfd136f8ed06375bd86dd", 0xe, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) 01:54:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x5}, 0x0) [ 2262.535618][ T9585] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:49 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 01:54:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0xe}, 0x0) [ 2262.754278][ T9593] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2262.763050][ T9593] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2262.791728][ T9594] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 01:54:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 01:54:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x14}, 0x0) 01:54:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x6}, 0x0) [ 2263.021309][ T9598] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:49 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 01:54:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0xf}, 0x0) 01:54:49 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = accept4$inet6(r1, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000040)='I', 0x20086, 0x41, 0x0, 0x0) 01:54:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) [ 2263.361474][ T9607] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2263.370159][ T9607] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x25}, 0x0) 01:54:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) [ 2263.499339][ T9609] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x7}, 0x0) 01:54:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 01:54:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 01:54:50 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) [ 2263.853469][ T9617] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2263.862233][ T9617] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x5d00}, 0x0) 01:54:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) [ 2263.982880][ T9621] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x8}, 0x0) 01:54:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x0) 01:54:50 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) bind$packet(r0, &(0x7f0000000400)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$packet(r0, &(0x7f0000000080)="1555f6acfd136f8ed06375bd86dd", 0xe, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) 01:54:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) [ 2264.325206][ T9630] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2264.334116][ T9630] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x7ffffff2}, 0x0) [ 2264.416208][ T9633] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:51 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 01:54:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x9}, 0x0) [ 2264.604330][ T9636] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 01:54:51 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x12}, 0x0) 01:54:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) [ 2264.813302][ T9644] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2264.829959][ T9644] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:51 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) [ 2264.913138][ T9646] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xa}, 0x0) 01:54:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x7ffffff8}, 0x0) 01:54:51 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x25}, 0x0) 01:54:51 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 01:54:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) [ 2265.304630][ T9653] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2265.313102][ T9653] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x7ffffff9}, 0x0) [ 2265.366979][ T9657] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:51 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 01:54:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xb}, 0x0) 01:54:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x48}, 0x0) 01:54:52 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 01:54:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 01:54:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x2}, 0x0) [ 2265.802710][ T9666] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2265.851322][ T9669] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xc}, 0x0) 01:54:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c}, 0x0) 01:54:52 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) [ 2266.083939][ T9674] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 01:54:52 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@newqdisc={0x198, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8}}, @qdisc_kind_options=@q_netem={{0xa}, {0x154, 0x2, {{0x0, 0x0, 0x0, 0x0, 0xfffffffb}, [@TCA_NETEM_RATE={0x14, 0x6, {0x0, 0x2}}, @TCA_NETEM_CORR={0x10}, @TCA_NETEM_SLOT={0x2c}, @TCA_NETEM_CORRUPT={0xc}, @TCA_NETEM_JITTER64={0xc}, @TCA_NETEM_LOSS={0x6c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x24, 0x1, {0x0, 0x0, 0x0, 0xffffffff}}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x8}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x0, 0x62, 0x1}}]}, @TCA_NETEM_CORR={0x10}, @TCA_NETEM_DELAY_DIST={0x53, 0x2, "bb31dd582025a5bfe05b342a891035fe2abd168e2c8b8d284dcd49405a3da4233a46fc0f50f25bb2abef41f435190e7d58e97dac5d759d1138e8b1e6821e0d9f9be0a90d6a87ad3aa42cf3624d64b1"}]}}}]}, 0x198}}, 0x0) bind$packet(r0, &(0x7f0000000400)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$packet(r0, &(0x7f0000000080)="1555f6acfd136f8ed06375bd86dd", 0xe, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) 01:54:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x3}, 0x0) [ 2266.230820][ T9676] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2266.328327][ T9678] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xd}, 0x0) [ 2266.523988][ T9684] validate_nla: 3 callbacks suppressed [ 2266.524054][ T9684] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2266.538254][ T9684] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:53 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 01:54:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x60}, 0x0) [ 2266.614466][ T9686] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 01:54:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 01:54:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x4}, 0x0) [ 2266.811986][ T9688] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2266.821020][ T9688] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2266.921974][ T9693] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2266.979719][ T9696] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2266.988114][ T9696] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:53 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0xc) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x1c) 01:54:53 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 01:54:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xe}, 0x0) 01:54:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x68}, 0x0) 01:54:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 01:54:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x5}, 0x0) [ 2267.450312][ T9705] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2267.500623][ T9704] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2267.509159][ T9704] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x6c}, 0x0) 01:54:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 01:54:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xf}, 0x0) [ 2267.706456][ T9709] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2267.715020][ T9709] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:54 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0xc) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 01:54:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) [ 2267.814730][ T9712] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 01:54:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x74}, 0x0) [ 2268.034901][ T9715] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2268.044291][ T9715] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x6}, 0x0) [ 2268.194784][ T9723] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) [ 2268.264109][ T9725] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2268.272650][ T9725] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x10}, 0x0) 01:54:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, 0x0, 0x0) 01:54:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x7a}, 0x0) 01:54:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x7}, 0x0) 01:54:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x7a}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) [ 2268.632462][ T9731] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2268.641472][ T9731] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2268.706137][ T9735] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2268.718929][ T9735] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2268.741908][ T9733] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:55 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, 0x0, 0x0) 01:54:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x11}, 0x0) [ 2268.856510][ T9739] IPv6: NLM_F_CREATE should be specified when creating new route [ 2268.865276][ T9739] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2268.873897][ T9739] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2268.881351][ T9739] IPv6: NLM_F_CREATE should be set when creating new route 01:54:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0xfc}, 0x0) 01:54:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 01:54:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x8}, 0x0) 01:54:55 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@newqdisc={0x198, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8}}, @qdisc_kind_options=@q_netem={{0xa}, {0x154, 0x2, {{0x0, 0x0, 0x0, 0x0, 0xfffffffb}, [@TCA_NETEM_RATE={0x14, 0x6, {0x0, 0x2}}, @TCA_NETEM_CORR={0x10}, @TCA_NETEM_SLOT={0x2c}, @TCA_NETEM_CORRUPT={0xc}, @TCA_NETEM_JITTER64={0xc}, @TCA_NETEM_LOSS={0x6c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x24, 0x1, {0x0, 0x0, 0x0, 0xffffffff}}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x8}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x0, 0x62, 0x1}}]}, @TCA_NETEM_CORR={0x10}, @TCA_NETEM_DELAY_DIST={0x53, 0x2, "bb31dd582025a5bfe05b342a891035fe2abd168e2c8b8d284dcd49405a3da4233a46fc0f50f25bb2abef41f435190e7d58e97dac5d759d1138e8b1e6821e0d9f9be0a90d6a87ad3aa42cf3624d64b1"}]}}}]}, 0x198}}, 0x0) bind$packet(r0, &(0x7f0000000400)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$packet(r0, &(0x7f0000000080)="1555f6acfd136f8ed06375bd86dd", 0xe, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) 01:54:55 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, 0x0, 0x0) [ 2269.110965][ T9743] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x12}, 0x0) [ 2269.246478][ T9746] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2269.322429][ T9749] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, 0x0, 0x0) 01:54:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x9}, 0x0) [ 2269.535850][ T9755] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x300}, 0x0) 01:54:56 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) 01:54:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x12}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x25}, 0x0) [ 2269.779890][ T9758] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2269.858013][ T9765] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2269.865613][ T9765] IPv6: NLM_F_CREATE should be set when creating new route [ 2269.873146][ T9765] IPv6: NLM_F_CREATE should be set when creating new route [ 2269.884758][ T9761] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xa}, 0x0) 01:54:56 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) 01:54:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, 0x0, 0x0) 01:54:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x500}, 0x0) 01:54:56 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@newqdisc={0x198, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8}}, @qdisc_kind_options=@q_netem={{0xa}, {0x154, 0x2, {{0x0, 0x0, 0x0, 0x0, 0xfffffffb}, [@TCA_NETEM_RATE={0x14, 0x6, {0x0, 0x2}}, @TCA_NETEM_CORR={0x10}, @TCA_NETEM_SLOT={0x2c}, @TCA_NETEM_CORRUPT={0xc}, @TCA_NETEM_JITTER64={0xc}, @TCA_NETEM_LOSS={0x6c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x24, 0x1, {0x0, 0x0, 0x0, 0xffffffff}}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x8}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x0, 0x62, 0x1}}]}, @TCA_NETEM_CORR={0x10}, @TCA_NETEM_DELAY_DIST={0x53, 0x2, "bb31dd582025a5bfe05b342a891035fe2abd168e2c8b8d284dcd49405a3da4233a46fc0f50f25bb2abef41f435190e7d58e97dac5d759d1138e8b1e6821e0d9f9be0a90d6a87ad3aa42cf3624d64b1"}]}}}]}, 0x198}}, 0x0) bind$packet(r0, &(0x7f0000000400)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$packet(r0, &(0x7f0000000080)="1555f6acfd136f8ed06375bd86dd", 0xe, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) [ 2270.170358][ T9769] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2270.192057][ T9768] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xb}, 0x0) [ 2270.322714][ T9775] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x48}, 0x0) [ 2270.395794][ T9777] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 01:54:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x600}, 0x0) 01:54:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, 0x0, 0x0) 01:54:57 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) [ 2270.532610][ T9780] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xc}, 0x0) [ 2270.693148][ T9782] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2270.779350][ T9786] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x2}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x700}, 0x0) [ 2270.944693][ T9790] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x4c}, 0x0) 01:54:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) 01:54:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}}, 0x0) [ 2271.201324][ T9792] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2271.228609][ T9794] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2271.236245][ T9794] IPv6: NLM_F_CREATE should be set when creating new route [ 2271.244221][ T9794] IPv6: NLM_F_CREATE should be set when creating new route 01:54:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xd}, 0x0) 01:54:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x900}, 0x0) [ 2271.431236][ T9799] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2271.452074][ T9801] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2271.459960][ T9801] IPv6: NLM_F_CREATE should be set when creating new route [ 2271.467418][ T9801] IPv6: NLM_F_CREATE should be set when creating new route 01:54:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x2}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2271.529186][ T9803] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) [ 2271.594601][ T9805] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x600, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:54:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xe}, 0x0) [ 2271.715971][ T9807] validate_nla: 13 callbacks suppressed [ 2271.716120][ T9807] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2271.731241][ T9807] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x60}, 0x0) 01:54:58 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0xa00}, 0x0) 01:54:58 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0xc) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0xf5ffffff, @loopback}, 0x1c) [ 2271.965854][ T9812] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2271.976414][ T9812] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2272.008932][ T9813] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2272.018487][ T9813] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) [ 2272.064184][ T9816] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:58 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0xb00}, 0x0) 01:54:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x68}, 0x0) 01:54:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xf}, 0x0) 01:54:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x7, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}}, 0x0) [ 2272.456053][ T9824] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2272.616171][ T9829] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2272.624826][ T9829] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2272.638236][ T9828] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2272.647992][ T9828] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000400)={'gretap0\x00', &(0x7f0000000300)={'syztnl0\x00', r1, 0x80, 0x40, 0x6, 0x1ff, {{0x2c, 0x4, 0x0, 0x8, 0xb0, 0x65, 0x0, 0x5, 0x2f, 0x0, @local, @broadcast, {[@noop, @lsrr={0x83, 0x7, 0x57, [@local]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x1b, 0xa8, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @loopback, @broadcast, @remote]}, @timestamp={0x44, 0x1c, 0x1a, 0x0, 0x6, [0x6, 0x1, 0x1, 0x4, 0x3, 0x6]}, @timestamp_addr={0x44, 0x34, 0xd4, 0x1, 0x3, [{@loopback, 0x8}, {@multicast2, 0x280}, {@empty, 0x1000}, {@loopback, 0x8}, {@broadcast, 0x3}, {@remote, 0x4459}]}, @ssrr={0x89, 0xb, 0x21, [@loopback, @multicast1]}, @lsrr={0x83, 0x17, 0xff, [@broadcast, @local, @rand_addr=0x64010100, @rand_addr=0x64010100, @remote]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000440)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0], 0x0, 0x8, &(0x7f0000000500)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x10, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r8}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r11}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000900)={&(0x7f0000000740)={0x18c, r3, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_getrule={0x1c, 0x22, 0x600, 0x70bd27, 0x25dfdbfd, {0x2, 0x14, 0x0, 0x7f, 0x2, 0x0, 0x0, 0x5, 0x4}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 01:54:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc00}, 0x0) [ 2272.666395][ T9830] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2272.674025][ T9830] IPv6: NLM_F_CREATE should be set when creating new route 01:54:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x60000000, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}}, 0x0) 01:54:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x10}, 0x0) 01:54:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x58, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x48}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xf8}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x4}, @ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x1}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x100}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x9}]}, 0x58}, 0x1, 0x0, 0x0, 0xc004}, 0x20000800) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0xae}}}}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @remote}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000180001000000000000f1ffff090000000000000400000000"], 0x1c}}, 0x0) [ 2272.920269][ T9834] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2272.934679][ T9832] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x6c}, 0x0) [ 2272.993065][ T9836] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2273.027094][ T9834] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2273.036376][ T9834] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2273.093976][ T9839] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2273.102699][ T9839] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0xd00}, 0x0) [ 2273.171947][ T9842] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2273.184201][ T9834] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2273.193167][ T9834] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2273.213257][ T9843] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 01:54:59 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0xc) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0xff0b020001000000, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) [ 2273.229943][ T9843] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:54:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x11}, 0x0) 01:54:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x74}, 0x0) 01:54:59 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0xc) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0xf5ffffff00000000, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 01:54:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x58, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x48}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xf8}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x4}, @ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x1}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x100}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x9}]}, 0x58}, 0x1, 0x0, 0x0, 0xc004}, 0x20000800) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0xae}}}}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @remote}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000180001000000000000f1ffff090000000000000400000000"], 0x1c}}, 0x0) [ 2273.512719][ T9847] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:00 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0xc) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x8dffffff00000000, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) [ 2273.660812][ T9851] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2273.669279][ T9851] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2273.693414][ T9852] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0xd82}, 0x0) 01:55:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x12}, 0x0) [ 2273.823737][ T9855] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 01:55:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x7a}, 0x0) 01:55:00 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0xc) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x6600000000000000, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) [ 2274.020488][ T9862] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2274.028426][ T9861] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x58, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x48}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xf8}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x4}, @ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x1}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x100}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x9}]}, 0x58}, 0x1, 0x0, 0x0, 0xc004}, 0x20000800) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0xae}}}}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @remote}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000180001000000000000f1ffff090000000000000400000000"], 0x1c}}, 0x0) 01:55:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0xe00}, 0x0) 01:55:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x6, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2274.225241][ T9864] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x25}, 0x0) 01:55:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xfc}, 0x0) [ 2274.490418][ T9871] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2274.511402][ T9872] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2274.536844][ T9870] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 01:55:01 executing program 0: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{}]}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe2$watch_queue(0x0, 0x80) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x1, 0x40200) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="1c002abd7000fedbdf250165bff027cbaae92f30884964cdb2650000000800030004000000050006000500000005000500050000000800030004000000e8e7b8d486b6eb7f72"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000126bd7000fedbdf25060000000a00180003030303030300000500530000000000080005000600000008000500030000004c764c61fe6b11ef7e25204d360e3d95b6d7cf02dc42efadb1a03d99f78b4db040c5e7993d79a00d2a0c620536a00b42aeca97ef65603b5337ddb96700"/124], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x5, &(0x7f00000003c0)=0xe03, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x2200c041, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x10) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd7, 0x0, 0x0, 0x0) [ 2274.613113][ T9874] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2274.672301][ T9877] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:01 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0xf00}, 0x0) 01:55:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x81000000, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:55:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x58, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x48}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xf8}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x4}, @ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x1}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x100}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x9}]}, 0x58}, 0x1, 0x0, 0x0, 0xc004}, 0x20000800) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0xae}}}}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @remote}, 0x10) socket$nl_route(0x10, 0x3, 0x0) 01:55:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x48}, 0x0) 01:55:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x300}, 0x0) [ 2274.926070][ T9881] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2275.071015][ T9886] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2275.093927][ T9885] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 01:55:01 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x1100}, 0x0) [ 2275.137928][ T9887] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0xf00}, 0x0) 01:55:01 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0xc) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0xf4010000, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) [ 2275.257205][ T9889] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x58, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x48}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xf8}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x4}, @ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x1}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x100}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x9}]}, 0x58}, 0x1, 0x0, 0x0, 0xc004}, 0x20000800) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0xae}}}}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @remote}, 0x10) 01:55:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x4c}, 0x0) 01:55:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x500}, 0x0) [ 2275.513483][ T9895] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2275.547146][ T9897] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2275.610937][ T9898] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (fail_nth: 1) [ 2275.662373][ T9900] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2275.669974][ T9900] IPv6: NLM_F_CREATE should be set when creating new route 01:55:02 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x1200}, 0x0) [ 2275.745041][ T9901] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x58, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x48}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xf8}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x4}, @ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x1}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x100}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x9}]}, 0x58}, 0x1, 0x0, 0x0, 0xc004}, 0x20000800) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0xae}}}}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:55:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x60}, 0x0) 01:55:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x600}, 0x0) [ 2275.966510][ T9906] FAULT_INJECTION: forcing a failure. [ 2275.966510][ T9906] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2275.980286][ T9906] CPU: 1 PID: 9906 Comm: syz-executor.1 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 2275.990904][ T9906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2276.001188][ T9906] Call Trace: [ 2276.004647][ T9906] [ 2276.007760][ T9906] dump_stack_lvl+0x1bf/0x240 [ 2276.012713][ T9906] dump_stack+0x1e/0x20 [ 2276.017116][ T9906] should_fail_ex+0x748/0x7f0 [ 2276.020390][ T9908] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2276.022051][ T9906] should_fail+0x2a/0x30 [ 2276.035950][ T9906] should_fail_usercopy+0x2e/0x40 [ 2276.037743][ T9909] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2276.041205][ T9906] _copy_from_user+0x33/0x160 [ 2276.041377][ T9906] __sys_connect+0x148/0x680 [ 2276.058267][ T9906] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2276.064386][ T9906] __x64_sys_connect+0x91/0xe0 [ 2276.069414][ T9906] do_syscall_64+0x44/0x110 [ 2276.074153][ T9906] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2276.080293][ T9906] RIP: 0033:0x7f7958c7cae9 [ 2276.084913][ T9906] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2276.104797][ T9906] RSP: 002b:00007f795991f0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 2276.113478][ T9906] RAX: ffffffffffffffda RBX: 00007f7958d9bf80 RCX: 00007f7958c7cae9 [ 2276.121663][ T9906] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 0000000000000004 [ 2276.129839][ T9906] RBP: 00007f795991f120 R08: 0000000000000000 R09: 0000000000000000 [ 2276.138385][ T9906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2276.146555][ T9906] R13: 000000000000000b R14: 00007f7958d9bf80 R15: 00007f7958ebfa48 [ 2276.154750][ T9906] [ 2276.158132][ C1] vkms_vblank_simulate: vblank timer overrun 01:55:02 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (fail_nth: 1) [ 2276.203159][ T9910] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x68}, 0x0) 01:55:02 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x2174}, 0x0) 01:55:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0xae}}}}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2276.427466][ T9912] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (fail_nth: 2) [ 2276.542372][ T9915] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x6c}, 0x0) [ 2276.592008][ T9918] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2276.608424][ T9920] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2276.618472][ T9919] FAULT_INJECTION: forcing a failure. [ 2276.618472][ T9919] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2276.632258][ T9919] CPU: 0 PID: 9919 Comm: syz-executor.0 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 2276.642872][ T9919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2276.653124][ T9919] Call Trace: [ 2276.656562][ T9919] [ 2276.659650][ T9919] dump_stack_lvl+0x1bf/0x240 [ 2276.664963][ T9919] dump_stack+0x1e/0x20 [ 2276.669364][ T9919] should_fail_ex+0x748/0x7f0 [ 2276.674335][ T9919] should_fail+0x2a/0x30 [ 2276.678849][ T9919] should_fail_usercopy+0x2e/0x40 [ 2276.684247][ T9919] _copy_from_user+0x33/0x160 [ 2276.689195][ T9919] __sys_connect+0x148/0x680 [ 2276.694049][ T9919] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2276.700169][ T9919] __x64_sys_connect+0x91/0xe0 [ 2276.705246][ T9919] do_syscall_64+0x44/0x110 [ 2276.709988][ T9919] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2276.716140][ T9919] RIP: 0033:0x7fdd6f47cae9 [ 2276.720850][ T9919] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2276.740715][ T9919] RSP: 002b:00007fdd700f70c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 2276.749392][ T9919] RAX: ffffffffffffffda RBX: 00007fdd6f59bf80 RCX: 00007fdd6f47cae9 [ 2276.757583][ T9919] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 0000000000000004 [ 2276.765766][ T9919] RBP: 00007fdd700f7120 R08: 0000000000000000 R09: 0000000000000000 [ 2276.773977][ T9919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2276.782148][ T9919] R13: 000000000000000b R14: 00007fdd6f59bf80 R15: 00007fdd6f6bfa48 [ 2276.790362][ T9919] 01:55:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x2500}, 0x0) 01:55:03 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (fail_nth: 2) [ 2276.973217][ T9922] FAULT_INJECTION: forcing a failure. [ 2276.973217][ T9922] name failslab, interval 1, probability 0, space 0, times 0 [ 2276.986746][ T9922] CPU: 0 PID: 9922 Comm: syz-executor.1 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 2276.997364][ T9922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2277.007654][ T9922] Call Trace: [ 2277.011117][ T9922] [ 2277.014213][ T9922] dump_stack_lvl+0x1bf/0x240 [ 2277.019175][ T9922] dump_stack+0x1e/0x20 [ 2277.023590][ T9922] should_fail_ex+0x748/0x7f0 [ 2277.028575][ T9922] __should_failslab+0x188/0x1f0 [ 2277.033801][ T9922] should_failslab+0x2d/0x70 [ 2277.038632][ T9922] slab_pre_alloc_hook+0xa7/0x880 [ 2277.043908][ T9922] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2277.050003][ T9922] kmem_cache_alloc_lru+0xc7/0x970 [ 2277.055361][ T9922] ? sock_alloc_inode+0x62/0x150 [ 2277.060577][ T9922] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2277.066670][ T9922] sock_alloc_inode+0x62/0x150 [ 2277.071721][ T9922] ? sockfs_init_fs_context+0x140/0x140 [ 2277.077549][ T9922] alloc_inode+0x83/0x440 [ 2277.082147][ T9922] new_inode_pseudo+0x35/0x100 [ 2277.087177][ T9922] __sock_create+0x22e/0xd60 [ 2277.092016][ T9922] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 2277.098543][ T9922] sock_create_kern+0x55/0x70 [ 2277.103480][ T9922] mptcp_subflow_create_socket+0xd3/0x1250 [ 2277.109658][ T9922] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 2277.116235][ T9922] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2277.122332][ T9922] __mptcp_nmpc_sk+0x15d/0x9b0 [ 2277.127362][ T9922] mptcp_connect+0x3f/0x1140 [ 2277.132237][ T9922] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2277.138323][ T9922] ? mptcp_close+0x1c0/0x1c0 [ 2277.143170][ T9922] __inet_stream_connect+0x2ed/0x1740 [ 2277.148794][ T9922] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 2277.155411][ T9922] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2277.161501][ T9922] ? __local_bh_enable_ip+0x74/0xa0 [ 2277.166984][ T9922] ? lock_sock_nested+0x1dd/0x1f0 [ 2277.172270][ T9922] inet_stream_connect+0x6a/0xd0 [ 2277.177453][ T9922] __sys_connect+0x5f9/0x680 [ 2277.182302][ T9922] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2277.188404][ T9922] ? __inet_stream_connect+0x1740/0x1740 [ 2277.194287][ T9922] __x64_sys_connect+0x91/0xe0 [ 2277.199314][ T9922] do_syscall_64+0x44/0x110 [ 2277.204067][ T9922] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2277.210237][ T9922] RIP: 0033:0x7f7958c7cae9 [ 2277.214868][ T9922] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2277.234747][ T9922] RSP: 002b:00007f795991f0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 2277.243428][ T9922] RAX: ffffffffffffffda RBX: 00007f7958d9bf80 RCX: 00007f7958c7cae9 [ 2277.251617][ T9922] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 0000000000000004 [ 2277.259799][ T9922] RBP: 00007f795991f120 R08: 0000000000000000 R09: 0000000000000000 [ 2277.267972][ T9922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2277.276137][ T9922] R13: 000000000000000b R14: 00007f7958d9bf80 R15: 00007f7958ebfa48 [ 2277.284335][ T9922] [ 2277.304590][ T9922] socket: no more sockets 01:55:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x700}, 0x0) 01:55:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0xae}}}}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2277.375830][ T9924] validate_nla: 14 callbacks suppressed [ 2277.375899][ T9924] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2277.391019][ T9924] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (fail_nth: 3) [ 2277.605153][ T9931] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2277.658853][ T9929] FAULT_INJECTION: forcing a failure. [ 2277.658853][ T9929] name failslab, interval 1, probability 0, space 0, times 0 [ 2277.662015][ T9933] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2277.672024][ T9929] CPU: 1 PID: 9929 Comm: syz-executor.0 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 2277.680226][ T9933] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2277.690418][ T9929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2277.690489][ T9929] Call Trace: [ 2277.690532][ T9929] [ 2277.690578][ T9929] dump_stack_lvl+0x1bf/0x240 [ 2277.719519][ T9929] dump_stack+0x1e/0x20 [ 2277.723991][ T9929] should_fail_ex+0x748/0x7f0 [ 2277.729044][ T9929] __should_failslab+0x188/0x1f0 [ 2277.734324][ T9929] should_failslab+0x2d/0x70 [ 2277.739190][ T9929] slab_pre_alloc_hook+0xa7/0x880 [ 2277.744489][ T9929] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2277.750607][ T9929] kmem_cache_alloc_lru+0xc7/0x970 [ 2277.755987][ T9929] ? sock_alloc_inode+0x62/0x150 [ 2277.761236][ T9929] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2277.767354][ T9929] sock_alloc_inode+0x62/0x150 [ 2277.772419][ T9929] ? sockfs_init_fs_context+0x140/0x140 [ 2277.778286][ T9929] alloc_inode+0x83/0x440 [ 2277.783440][ T9929] new_inode_pseudo+0x35/0x100 [ 2277.788482][ T9929] __sock_create+0x22e/0xd60 [ 2277.793348][ T9929] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 2277.799898][ T9929] sock_create_kern+0x55/0x70 [ 2277.804858][ T9929] mptcp_subflow_create_socket+0xd3/0x1250 [ 2277.810965][ T9929] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 2277.817513][ T9929] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2277.823626][ T9929] __mptcp_nmpc_sk+0x15d/0x9b0 [ 2277.828672][ T9929] mptcp_connect+0x3f/0x1140 [ 2277.833534][ T9929] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2277.839626][ T9929] ? mptcp_close+0x1c0/0x1c0 [ 2277.844474][ T9929] __inet_stream_connect+0x2ed/0x1740 [ 2277.850104][ T9929] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 2277.856629][ T9929] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2277.862712][ T9929] ? __local_bh_enable_ip+0x74/0xa0 [ 2277.868233][ T9929] ? lock_sock_nested+0x1dd/0x1f0 [ 2277.873511][ T9929] inet_stream_connect+0x6a/0xd0 [ 2277.878777][ T9929] __sys_connect+0x5f9/0x680 [ 2277.883621][ T9929] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2277.889735][ T9929] ? __inet_stream_connect+0x1740/0x1740 [ 2277.895644][ T9929] __x64_sys_connect+0x91/0xe0 [ 2277.900690][ T9929] do_syscall_64+0x44/0x110 [ 2277.905441][ T9929] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2277.911588][ T9929] RIP: 0033:0x7fdd6f47cae9 [ 2277.916205][ T9929] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2277.936099][ T9929] RSP: 002b:00007fdd700f70c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 2277.944797][ T9929] RAX: ffffffffffffffda RBX: 00007fdd6f59bf80 RCX: 00007fdd6f47cae9 [ 2277.953009][ T9929] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 0000000000000004 [ 2277.961198][ T9929] RBP: 00007fdd700f7120 R08: 0000000000000000 R09: 0000000000000000 [ 2277.969374][ T9929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2277.977547][ T9929] R13: 000000000000000b R14: 00007fdd6f59bf80 R15: 00007fdd6f6bfa48 [ 2277.985745][ T9929] [ 2277.988943][ C1] vkms_vblank_simulate: vblank timer overrun [ 2278.004836][ T9929] socket: no more sockets 01:55:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x74}, 0x0) 01:55:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0xae}}}}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:55:04 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x3f00}, 0x0) 01:55:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x900}, 0x0) [ 2278.274528][ T9939] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2278.284293][ T9939] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2278.312600][ T9935] FAULT_INJECTION: forcing a failure. 01:55:04 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (fail_nth: 3) [ 2278.312600][ T9935] name failslab, interval 1, probability 0, space 0, times 0 [ 2278.325821][ T9935] CPU: 1 PID: 9935 Comm: syz-executor.1 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 2278.336434][ T9935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2278.346733][ T9935] Call Trace: [ 2278.350189][ T9935] [ 2278.353291][ T9935] dump_stack_lvl+0x1bf/0x240 [ 2278.358327][ T9935] dump_stack+0x1e/0x20 [ 2278.361980][ T9941] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2278.362645][ T9935] should_fail_ex+0x748/0x7f0 [ 2278.374997][ T9935] __should_failslab+0x188/0x1f0 [ 2278.380245][ T9935] should_failslab+0x2d/0x70 [ 2278.385092][ T9935] kmem_cache_alloc+0xe6/0xa90 [ 2278.390112][ T9935] ? security_inode_alloc+0x7e/0x280 [ 2278.395730][ T9935] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2278.401868][ T9935] security_inode_alloc+0x7e/0x280 [ 2278.407307][ T9935] inode_init_always+0x70d/0x7b0 [ 2278.412556][ T9935] alloc_inode+0x120/0x440 [ 2278.417302][ T9935] new_inode_pseudo+0x35/0x100 [ 2278.422380][ T9935] __sock_create+0x22e/0xd60 [ 2278.427300][ T9935] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 2278.433905][ T9935] sock_create_kern+0x55/0x70 [ 2278.438873][ T9935] mptcp_subflow_create_socket+0xd3/0x1250 [ 2278.444993][ T9935] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 2278.451548][ T9935] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2278.457678][ T9935] __mptcp_nmpc_sk+0x15d/0x9b0 [ 2278.462749][ T9935] mptcp_connect+0x3f/0x1140 [ 2278.467632][ T9935] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2278.473748][ T9935] ? mptcp_close+0x1c0/0x1c0 [ 2278.478633][ T9935] __inet_stream_connect+0x2ed/0x1740 [ 2278.484286][ T9935] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 2278.490835][ T9935] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2278.496951][ T9935] ? __local_bh_enable_ip+0x74/0xa0 [ 2278.502491][ T9935] ? lock_sock_nested+0x1dd/0x1f0 [ 2278.507821][ T9935] inet_stream_connect+0x6a/0xd0 [ 2278.513037][ T9935] __sys_connect+0x5f9/0x680 [ 2278.517899][ T9935] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2278.523992][ T9935] ? __inet_stream_connect+0x1740/0x1740 [ 2278.529885][ T9935] __x64_sys_connect+0x91/0xe0 [ 2278.534943][ T9935] do_syscall_64+0x44/0x110 [ 2278.539720][ T9935] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2278.545900][ T9935] RIP: 0033:0x7f7958c7cae9 [ 2278.550537][ T9935] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2278.570436][ T9935] RSP: 002b:00007f795991f0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 2278.579122][ T9935] RAX: ffffffffffffffda RBX: 00007f7958d9bf80 RCX: 00007f7958c7cae9 [ 2278.587315][ T9935] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 0000000000000004 [ 2278.595493][ T9935] RBP: 00007f795991f120 R08: 0000000000000000 R09: 0000000000000000 [ 2278.603702][ T9935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2278.611893][ T9935] R13: 000000000000000b R14: 00007f7958d9bf80 R15: 00007f7958ebfa48 [ 2278.620096][ T9935] [ 2278.623306][ C1] vkms_vblank_simulate: vblank timer overrun [ 2278.634486][ T9935] socket: no more sockets 01:55:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0xae}}}}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:55:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4788}, 0x0) 01:55:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x7a}, 0x0) [ 2278.732615][ T9943] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2278.742006][ T9943] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (fail_nth: 4) 01:55:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xa00}, 0x0) [ 2278.941383][ T9948] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2278.950804][ T9948] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2278.965557][ T9951] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2279.014922][ T9952] FAULT_INJECTION: forcing a failure. [ 2279.014922][ T9952] name failslab, interval 1, probability 0, space 0, times 0 [ 2279.028026][ T9952] CPU: 1 PID: 9952 Comm: syz-executor.0 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 2279.038637][ T9952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2279.048914][ T9952] Call Trace: [ 2279.052349][ T9952] [ 2279.055458][ T9952] dump_stack_lvl+0x1bf/0x240 [ 2279.060417][ T9952] dump_stack+0x1e/0x20 01:55:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0xae}}}}}, @RTA_OIF={0x8}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2279.064818][ T9952] should_fail_ex+0x748/0x7f0 [ 2279.069809][ T9952] __should_failslab+0x188/0x1f0 [ 2279.075045][ T9952] should_failslab+0x2d/0x70 [ 2279.079911][ T9952] kmem_cache_alloc+0xe6/0xa90 [ 2279.084933][ T9952] ? security_inode_alloc+0x7e/0x280 [ 2279.090530][ T9952] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2279.096657][ T9952] security_inode_alloc+0x7e/0x280 [ 2279.102076][ T9952] inode_init_always+0x70d/0x7b0 [ 2279.107318][ T9952] alloc_inode+0x120/0x440 [ 2279.112006][ T9952] new_inode_pseudo+0x35/0x100 [ 2279.117134][ T9952] __sock_create+0x22e/0xd60 [ 2279.121984][ T9952] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 2279.128514][ T9952] sock_create_kern+0x55/0x70 [ 2279.133445][ T9952] mptcp_subflow_create_socket+0xd3/0x1250 [ 2279.139547][ T9952] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 2279.146075][ T9952] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2279.152173][ T9952] __mptcp_nmpc_sk+0x15d/0x9b0 [ 2279.157294][ T9952] mptcp_connect+0x3f/0x1140 [ 2279.162166][ T9952] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2279.168258][ T9952] ? mptcp_close+0x1c0/0x1c0 [ 2279.173108][ T9952] __inet_stream_connect+0x2ed/0x1740 [ 2279.178732][ T9952] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 2279.185264][ T9952] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2279.191441][ T9952] ? __local_bh_enable_ip+0x74/0xa0 [ 2279.196921][ T9952] ? lock_sock_nested+0x1dd/0x1f0 [ 2279.202224][ T9952] inet_stream_connect+0x6a/0xd0 [ 2279.207402][ T9952] __sys_connect+0x5f9/0x680 [ 2279.212255][ T9952] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2279.218341][ T9952] ? __inet_stream_connect+0x1740/0x1740 [ 2279.224313][ T9952] __x64_sys_connect+0x91/0xe0 [ 2279.229335][ T9952] do_syscall_64+0x44/0x110 [ 2279.234168][ T9952] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2279.240311][ T9952] RIP: 0033:0x7fdd6f47cae9 [ 2279.244932][ T9952] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2279.264797][ T9952] RSP: 002b:00007fdd6dffe0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 2279.273475][ T9952] RAX: ffffffffffffffda RBX: 00007fdd6f59c050 RCX: 00007fdd6f47cae9 [ 2279.281670][ T9952] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 0000000000000004 [ 2279.289847][ T9952] RBP: 00007fdd6dffe120 R08: 0000000000000000 R09: 0000000000000000 [ 2279.298021][ T9952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2279.306205][ T9952] R13: 000000000000006e R14: 00007fdd6f59c050 R15: 00007fdd6f6bfa48 [ 2279.314402][ T9952] [ 2279.317602][ C1] vkms_vblank_simulate: vblank timer overrun [ 2279.329347][ T9952] socket: no more sockets [ 2279.425796][ T9955] FAULT_INJECTION: forcing a failure. [ 2279.425796][ T9955] name failslab, interval 1, probability 0, space 0, times 0 [ 2279.439643][ T9955] CPU: 0 PID: 9955 Comm: syz-executor.1 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 2279.450245][ T9955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2279.460533][ T9955] Call Trace: [ 2279.463988][ T9955] [ 2279.467093][ T9955] dump_stack_lvl+0x1bf/0x240 [ 2279.472046][ T9955] dump_stack+0x1e/0x20 [ 2279.476446][ T9955] should_fail_ex+0x748/0x7f0 [ 2279.481486][ T9955] __should_failslab+0x188/0x1f0 [ 2279.486716][ T9955] should_failslab+0x2d/0x70 [ 2279.491555][ T9955] kmem_cache_alloc+0xe6/0xa90 [ 2279.496560][ T9955] ? sk_prot_alloc+0x9c/0x440 [ 2279.501477][ T9955] ? kmem_cache_alloc+0x589/0xa90 [ 2279.506746][ T9955] sk_prot_alloc+0x9c/0x440 [ 2279.511514][ T9955] sk_alloc+0x55/0x850 [ 2279.515818][ T9955] inet_create+0xa40/0x1760 [ 2279.520571][ T9955] ? ipip_gro_complete+0x670/0x670 [ 2279.526015][ T9955] __sock_create+0x768/0xd60 [ 2279.530868][ T9955] sock_create_kern+0x55/0x70 [ 2279.535884][ T9955] mptcp_subflow_create_socket+0xd3/0x1250 [ 2279.541980][ T9955] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 2279.548509][ T9955] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2279.554599][ T9955] __mptcp_nmpc_sk+0x15d/0x9b0 [ 2279.559822][ T9955] mptcp_connect+0x3f/0x1140 [ 2279.564722][ T9955] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2279.570862][ T9955] ? mptcp_close+0x1c0/0x1c0 [ 2279.575746][ T9955] __inet_stream_connect+0x2ed/0x1740 [ 2279.581395][ T9955] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 2279.587930][ T9955] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2279.594016][ T9955] ? __local_bh_enable_ip+0x74/0xa0 [ 2279.599591][ T9955] ? lock_sock_nested+0x1dd/0x1f0 [ 2279.604885][ T9955] inet_stream_connect+0x6a/0xd0 [ 2279.610064][ T9955] __sys_connect+0x5f9/0x680 [ 2279.614916][ T9955] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2279.621006][ T9955] ? __inet_stream_connect+0x1740/0x1740 [ 2279.626908][ T9955] __x64_sys_connect+0x91/0xe0 [ 2279.631937][ T9955] do_syscall_64+0x44/0x110 [ 2279.636673][ T9955] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2279.642904][ T9955] RIP: 0033:0x7f7958c7cae9 [ 2279.647666][ T9955] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2279.667590][ T9955] RSP: 002b:00007f795991f0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002a 01:55:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x0) [ 2279.676288][ T9955] RAX: ffffffffffffffda RBX: 00007f7958d9bf80 RCX: 00007f7958c7cae9 [ 2279.684482][ T9955] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 0000000000000004 [ 2279.692681][ T9955] RBP: 00007f795991f120 R08: 0000000000000000 R09: 0000000000000000 [ 2279.700881][ T9955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2279.709084][ T9955] R13: 000000000000000b R14: 00007f7958d9bf80 R15: 00007f7958ebfa48 [ 2279.717317][ T9955] 01:55:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0xae}}}}}, @RTA_OIF={0x8}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2279.743050][ T9956] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2279.752276][ T9956] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xfc}, 0x0) 01:55:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xb00}, 0x0) 01:55:06 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (fail_nth: 4) [ 2280.056095][ T9960] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2280.064831][ T9960] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2280.073122][ T9964] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2280.087471][ T9964] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2280.126287][ T9966] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (fail_nth: 5) 01:55:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0xae}}}}}, @RTA_OIF={0x8}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:55:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x300}, 0x0) 01:55:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xc00}, 0x0) 01:55:06 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4888}, 0x0) [ 2280.352470][ T9968] FAULT_INJECTION: forcing a failure. [ 2280.352470][ T9968] name failslab, interval 1, probability 0, space 0, times 0 [ 2280.366305][ T9968] CPU: 0 PID: 9968 Comm: syz-executor.0 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 2280.376944][ T9968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2280.387212][ T9968] Call Trace: [ 2280.390675][ T9968] [ 2280.393784][ T9968] dump_stack_lvl+0x1bf/0x240 [ 2280.398737][ T9968] dump_stack+0x1e/0x20 [ 2280.403130][ T9968] should_fail_ex+0x748/0x7f0 [ 2280.408108][ T9968] __should_failslab+0x188/0x1f0 [ 2280.413329][ T9968] should_failslab+0x2d/0x70 [ 2280.418169][ T9968] kmem_cache_alloc+0xe6/0xa90 [ 2280.423168][ T9968] ? sk_prot_alloc+0x9c/0x440 [ 2280.428080][ T9968] ? kmem_cache_alloc+0x589/0xa90 [ 2280.433351][ T9968] sk_prot_alloc+0x9c/0x440 [ 2280.438104][ T9968] sk_alloc+0x55/0x850 [ 2280.442407][ T9968] inet_create+0xa40/0x1760 [ 2280.447167][ T9968] ? ipip_gro_complete+0x670/0x670 [ 2280.452543][ T9968] __sock_create+0x768/0xd60 [ 2280.457398][ T9968] sock_create_kern+0x55/0x70 [ 2280.462331][ T9968] mptcp_subflow_create_socket+0xd3/0x1250 [ 2280.468430][ T9968] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 2280.474961][ T9968] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2280.481055][ T9968] __mptcp_nmpc_sk+0x15d/0x9b0 [ 2280.486085][ T9968] mptcp_connect+0x3f/0x1140 [ 2280.490944][ T9968] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2280.497037][ T9968] ? mptcp_close+0x1c0/0x1c0 [ 2280.501885][ T9968] __inet_stream_connect+0x2ed/0x1740 [ 2280.507523][ T9968] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 2280.514052][ T9968] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2280.520165][ T9968] ? __local_bh_enable_ip+0x74/0xa0 [ 2280.525679][ T9968] ? lock_sock_nested+0x1dd/0x1f0 [ 2280.530985][ T9968] inet_stream_connect+0x6a/0xd0 [ 2280.536206][ T9968] __sys_connect+0x5f9/0x680 [ 2280.541061][ T9968] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2280.547150][ T9968] ? __inet_stream_connect+0x1740/0x1740 [ 2280.553040][ T9968] __x64_sys_connect+0x91/0xe0 [ 2280.558069][ T9968] do_syscall_64+0x44/0x110 [ 2280.562805][ T9968] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2280.569037][ T9968] RIP: 0033:0x7fdd6f47cae9 [ 2280.573654][ T9968] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2280.593547][ T9968] RSP: 002b:00007fdd700f70c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 2280.602241][ T9968] RAX: ffffffffffffffda RBX: 00007fdd6f59bf80 RCX: 00007fdd6f47cae9 [ 2280.610431][ T9968] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 0000000000000004 [ 2280.618604][ T9968] RBP: 00007fdd700f7120 R08: 0000000000000000 R09: 0000000000000000 [ 2280.626892][ T9968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2280.635076][ T9968] R13: 000000000000000b R14: 00007fdd6f59bf80 R15: 00007fdd6f6bfa48 [ 2280.643304][ T9968] [ 2280.668794][ T9971] FAULT_INJECTION: forcing a failure. [ 2280.668794][ T9971] name failslab, interval 1, probability 0, space 0, times 0 [ 2280.681971][ T9971] CPU: 1 PID: 9971 Comm: syz-executor.1 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 2280.692574][ T9971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2280.702861][ T9971] Call Trace: [ 2280.706313][ T9971] [ 2280.709411][ T9971] dump_stack_lvl+0x1bf/0x240 [ 2280.714351][ T9971] dump_stack+0x1e/0x20 [ 2280.718745][ T9971] should_fail_ex+0x748/0x7f0 [ 2280.723741][ T9971] __should_failslab+0x188/0x1f0 [ 2280.728994][ T9971] should_failslab+0x2d/0x70 [ 2280.733852][ T9971] __kmem_cache_alloc_node+0xc6/0x970 [ 2280.739486][ T9971] ? apparmor_sk_alloc_security+0xaa/0x1e0 [ 2280.745597][ T9971] ? slab_post_alloc_hook+0x251/0xa70 [ 2280.751268][ T9971] kmalloc_trace+0x51/0x200 [ 2280.756022][ T9971] ? apparmor_sk_alloc_security+0xaa/0x1e0 [ 2280.762125][ T9971] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2280.768251][ T9971] apparmor_sk_alloc_security+0xaa/0x1e0 [ 2280.774184][ T9971] ? apparmor_setprocattr+0xff0/0xff0 [ 2280.779845][ T9971] security_sk_alloc+0x9f/0x150 [ 2280.785002][ T9971] sk_prot_alloc+0x1ed/0x440 [ 2280.789879][ T9971] sk_alloc+0x55/0x850 [ 2280.794209][ T9971] inet_create+0xa40/0x1760 [ 2280.798989][ T9971] ? ipip_gro_complete+0x670/0x670 [ 2280.804373][ T9971] __sock_create+0x768/0xd60 [ 2280.809248][ T9971] sock_create_kern+0x55/0x70 [ 2280.814198][ T9971] mptcp_subflow_create_socket+0xd3/0x1250 [ 2280.820315][ T9971] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 2280.826873][ T9971] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2280.832996][ T9971] __mptcp_nmpc_sk+0x15d/0x9b0 [ 2280.838061][ T9971] mptcp_connect+0x3f/0x1140 [ 2280.842975][ T9971] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2280.849127][ T9971] ? mptcp_close+0x1c0/0x1c0 [ 2280.853999][ T9971] __inet_stream_connect+0x2ed/0x1740 [ 2280.859641][ T9971] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 2280.866196][ T9971] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2280.872300][ T9971] ? __local_bh_enable_ip+0x74/0xa0 [ 2280.877802][ T9971] ? lock_sock_nested+0x1dd/0x1f0 [ 2280.883120][ T9971] inet_stream_connect+0x6a/0xd0 [ 2280.888326][ T9971] __sys_connect+0x5f9/0x680 [ 2280.893203][ T9971] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2280.899315][ T9971] ? __inet_stream_connect+0x1740/0x1740 [ 2280.905231][ T9971] __x64_sys_connect+0x91/0xe0 [ 2280.910287][ T9971] do_syscall_64+0x44/0x110 [ 2280.915048][ T9971] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2280.921221][ T9971] RIP: 0033:0x7f7958c7cae9 [ 2280.925868][ T9971] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2280.945758][ T9971] RSP: 002b:00007f795991f0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 2280.954471][ T9971] RAX: ffffffffffffffda RBX: 00007f7958d9bf80 RCX: 00007f7958c7cae9 01:55:07 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (fail_nth: 5) [ 2280.962683][ T9971] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 0000000000000004 [ 2280.970893][ T9971] RBP: 00007f795991f120 R08: 0000000000000000 R09: 0000000000000000 [ 2280.979092][ T9971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2280.987286][ T9971] R13: 000000000000000b R14: 00007f7958d9bf80 R15: 00007f7958ebfa48 [ 2280.995508][ T9971] [ 2280.998796][ C1] vkms_vblank_simulate: vblank timer overrun [ 2281.128503][ T9979] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2281.159044][ T9976] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2281.167755][ T9976] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:07 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c00}, 0x0) 01:55:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0xae}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2281.209624][ T9977] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2281.218081][ T9977] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (fail_nth: 6) [ 2281.317196][ T9981] FAULT_INJECTION: forcing a failure. [ 2281.317196][ T9981] name failslab, interval 1, probability 0, space 0, times 0 [ 2281.330541][ T9981] CPU: 0 PID: 9981 Comm: syz-executor.0 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 2281.341155][ T9981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2281.351433][ T9981] Call Trace: [ 2281.354889][ T9981] [ 2281.357985][ T9981] dump_stack_lvl+0x1bf/0x240 [ 2281.362942][ T9981] dump_stack+0x1e/0x20 [ 2281.367362][ T9981] should_fail_ex+0x748/0x7f0 [ 2281.372369][ T9981] __should_failslab+0x188/0x1f0 [ 2281.377604][ T9981] should_failslab+0x2d/0x70 [ 2281.382449][ T9981] __kmem_cache_alloc_node+0xc6/0x970 [ 2281.388089][ T9981] ? apparmor_sk_alloc_security+0xaa/0x1e0 [ 2281.394192][ T9981] ? slab_post_alloc_hook+0x251/0xa70 [ 2281.399868][ T9981] kmalloc_trace+0x51/0x200 [ 2281.404627][ T9981] ? apparmor_sk_alloc_security+0xaa/0x1e0 [ 2281.410727][ T9981] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2281.416882][ T9981] apparmor_sk_alloc_security+0xaa/0x1e0 [ 2281.422805][ T9981] ? apparmor_setprocattr+0xff0/0xff0 [ 2281.428469][ T9981] security_sk_alloc+0x9f/0x150 [ 2281.433626][ T9981] sk_prot_alloc+0x1ed/0x440 [ 2281.438498][ T9981] sk_alloc+0x55/0x850 [ 2281.442831][ T9981] inet_create+0xa40/0x1760 [ 2281.447608][ T9981] ? ipip_gro_complete+0x670/0x670 [ 2281.452986][ T9981] __sock_create+0x768/0xd60 [ 2281.457852][ T9981] sock_create_kern+0x55/0x70 [ 2281.462792][ T9981] mptcp_subflow_create_socket+0xd3/0x1250 [ 2281.468896][ T9981] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 2281.475420][ T9981] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2281.481517][ T9981] __mptcp_nmpc_sk+0x15d/0x9b0 [ 2281.486547][ T9981] mptcp_connect+0x3f/0x1140 [ 2281.491401][ T9981] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2281.497489][ T9981] ? mptcp_close+0x1c0/0x1c0 [ 2281.502340][ T9981] __inet_stream_connect+0x2ed/0x1740 [ 2281.507964][ T9981] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 2281.514490][ T9981] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2281.520589][ T9981] ? __local_bh_enable_ip+0x74/0xa0 [ 2281.526069][ T9981] ? lock_sock_nested+0x1dd/0x1f0 [ 2281.531357][ T9981] inet_stream_connect+0x6a/0xd0 [ 2281.536542][ T9981] __sys_connect+0x5f9/0x680 [ 2281.541504][ T9981] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2281.547635][ T9981] ? __inet_stream_connect+0x1740/0x1740 [ 2281.553548][ T9981] __x64_sys_connect+0x91/0xe0 [ 2281.558582][ T9981] do_syscall_64+0x44/0x110 [ 2281.563325][ T9981] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2281.569494][ T9981] RIP: 0033:0x7fdd6f47cae9 [ 2281.574144][ T9981] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2281.594051][ T9981] RSP: 002b:00007fdd700f70c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 2281.602767][ T9981] RAX: ffffffffffffffda RBX: 00007fdd6f59bf80 RCX: 00007fdd6f47cae9 01:55:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x500}, 0x0) [ 2281.610991][ T9981] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 0000000000000004 [ 2281.619205][ T9981] RBP: 00007fdd700f7120 R08: 0000000000000000 R09: 0000000000000000 [ 2281.627405][ T9981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2281.635582][ T9981] R13: 000000000000000b R14: 00007fdd6f59bf80 R15: 00007fdd6f6bfa48 [ 2281.643788][ T9981] 01:55:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xd00}, 0x0) [ 2281.787912][ T9987] FAULT_INJECTION: forcing a failure. [ 2281.787912][ T9987] name failslab, interval 1, probability 0, space 0, times 0 [ 2281.801243][ T9987] CPU: 0 PID: 9987 Comm: syz-executor.1 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 2281.811862][ T9987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2281.822134][ T9987] Call Trace: [ 2281.825592][ T9987] [ 2281.828701][ T9987] dump_stack_lvl+0x1bf/0x240 [ 2281.833655][ T9987] dump_stack+0x1e/0x20 [ 2281.838077][ T9987] should_fail_ex+0x748/0x7f0 [ 2281.843078][ T9987] __should_failslab+0x188/0x1f0 [ 2281.848329][ T9987] should_failslab+0x2d/0x70 [ 2281.848900][ T9990] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2281.853104][ T9987] __kmem_cache_alloc_node+0xc6/0x970 [ 2281.853243][ T9987] ? subflow_ulp_init+0xca/0x6b0 [ 2281.871174][ T9987] kmalloc_trace+0x51/0x200 [ 2281.875939][ T9987] ? subflow_ulp_init+0xca/0x6b0 [ 2281.881171][ T9987] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2281.887289][ T9987] subflow_ulp_init+0xca/0x6b0 [ 2281.887451][ T9989] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2281.899661][ T9987] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2281.905781][ T9987] ? mptcp_set_connected+0x4e0/0x4e0 [ 2281.911384][ T9987] ? mptcp_set_connected+0x4e0/0x4e0 [ 2281.916978][ T9987] tcp_set_ulp+0x593/0x680 [ 2281.921679][ T9987] mptcp_subflow_create_socket+0x8f6/0x1250 [ 2281.927887][ T9987] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 2281.934466][ T9987] __mptcp_nmpc_sk+0x15d/0x9b0 [ 2281.939529][ T9987] mptcp_connect+0x3f/0x1140 [ 2281.944422][ T9987] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2281.950539][ T9987] ? mptcp_close+0x1c0/0x1c0 [ 2281.955424][ T9987] __inet_stream_connect+0x2ed/0x1740 [ 2281.961082][ T9987] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 2281.967638][ T9987] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2281.973768][ T9987] ? __local_bh_enable_ip+0x74/0xa0 [ 2281.979284][ T9987] ? lock_sock_nested+0x1dd/0x1f0 [ 2281.984595][ T9987] inet_stream_connect+0x6a/0xd0 [ 2281.989813][ T9987] __sys_connect+0x5f9/0x680 [ 2281.994691][ T9987] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2282.000809][ T9987] ? __inet_stream_connect+0x1740/0x1740 [ 2282.006729][ T9987] __x64_sys_connect+0x91/0xe0 [ 2282.011780][ T9987] do_syscall_64+0x44/0x110 [ 2282.016546][ T9987] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2282.022735][ T9987] RIP: 0033:0x7f7958c7cae9 [ 2282.027395][ T9987] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2282.047302][ T9987] RSP: 002b:00007f795991f0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 2282.056020][ T9987] RAX: ffffffffffffffda RBX: 00007f7958d9bf80 RCX: 00007f7958c7cae9 [ 2282.064243][ T9987] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 0000000000000004 [ 2282.072451][ T9987] RBP: 00007f795991f120 R08: 0000000000000000 R09: 0000000000000000 [ 2282.080664][ T9987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 01:55:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x600}, 0x0) [ 2282.088876][ T9987] R13: 000000000000000b R14: 00007f7958d9bf80 R15: 00007f7958ebfa48 [ 2282.097113][ T9987] 01:55:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0xae}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:55:08 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (fail_nth: 6) [ 2282.182400][ T9992] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xe00}, 0x0) 01:55:08 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5865}, 0x0) 01:55:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (fail_nth: 7) [ 2282.415321][ T9997] validate_nla: 2 callbacks suppressed [ 2282.415390][ T9997] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2282.429971][ T9997] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2282.514335][ T9998] FAULT_INJECTION: forcing a failure. [ 2282.514335][ T9998] name failslab, interval 1, probability 0, space 0, times 0 [ 2282.527445][ T9998] CPU: 1 PID: 9998 Comm: syz-executor.0 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 2282.538050][ T9998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2282.548330][ T9998] Call Trace: [ 2282.551783][ T9998] [ 2282.554900][ T9998] dump_stack_lvl+0x1bf/0x240 [ 2282.559866][ T9998] dump_stack+0x1e/0x20 [ 2282.564327][ T9998] should_fail_ex+0x748/0x7f0 [ 2282.569357][ T9998] __should_failslab+0x188/0x1f0 [ 2282.573773][T10000] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2282.574499][ T9998] should_failslab+0x2d/0x70 [ 2282.574642][ T9998] __kmem_cache_alloc_node+0xc6/0x970 [ 2282.583830][T10000] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2282.587393][ T9998] ? subflow_ulp_init+0xca/0x6b0 [ 2282.605476][ T9998] kmalloc_trace+0x51/0x200 [ 2282.610264][ T9998] ? subflow_ulp_init+0xca/0x6b0 [ 2282.615520][ T9998] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2282.621654][ T9998] subflow_ulp_init+0xca/0x6b0 [ 2282.626750][ T9998] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2282.632882][ T9998] ? mptcp_set_connected+0x4e0/0x4e0 [ 2282.634273][T10002] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2282.638401][ T9998] ? mptcp_set_connected+0x4e0/0x4e0 [ 2282.651230][ T9998] tcp_set_ulp+0x593/0x680 [ 2282.655929][ T9998] mptcp_subflow_create_socket+0x8f6/0x1250 [ 2282.662143][ T9998] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 2282.668718][ T9998] __mptcp_nmpc_sk+0x15d/0x9b0 [ 2282.673784][ T9998] mptcp_connect+0x3f/0x1140 [ 2282.678672][ T9998] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2282.684791][ T9998] ? mptcp_close+0x1c0/0x1c0 [ 2282.689670][ T9998] __inet_stream_connect+0x2ed/0x1740 [ 2282.695342][ T9998] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 2282.701906][ T9998] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2282.708018][ T9998] ? __local_bh_enable_ip+0x74/0xa0 [ 2282.713529][ T9998] ? lock_sock_nested+0x1dd/0x1f0 [ 2282.718847][ T9998] inet_stream_connect+0x6a/0xd0 [ 2282.724065][ T9998] __sys_connect+0x5f9/0x680 [ 2282.728951][ T9998] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2282.735077][ T9998] ? __inet_stream_connect+0x1740/0x1740 [ 2282.741082][ T9998] __x64_sys_connect+0x91/0xe0 [ 2282.746171][ T9998] do_syscall_64+0x44/0x110 [ 2282.750933][ T9998] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2282.757093][ T9998] RIP: 0033:0x7fdd6f47cae9 [ 2282.761739][ T9998] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2282.781659][ T9998] RSP: 002b:00007fdd700f70c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 2282.790345][ T9998] RAX: ffffffffffffffda RBX: 00007fdd6f59bf80 RCX: 00007fdd6f47cae9 [ 2282.798530][ T9998] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 0000000000000004 [ 2282.806700][ T9998] RBP: 00007fdd700f7120 R08: 0000000000000000 R09: 0000000000000000 [ 2282.814872][ T9998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2282.823040][ T9998] R13: 000000000000000b R14: 00007fdd6f59bf80 R15: 00007fdd6f6bfa48 [ 2282.831246][ T9998] [ 2282.834442][ C1] vkms_vblank_simulate: vblank timer overrun 01:55:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x700}, 0x0) 01:55:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0xae}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:55:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x6000}, 0x0) 01:55:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xf00}, 0x0) [ 2283.084673][T10006] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2283.093342][T10006] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2283.111333][T10005] FAULT_INJECTION: forcing a failure. [ 2283.111333][T10005] name failslab, interval 1, probability 0, space 0, times 0 [ 2283.126933][T10005] CPU: 1 PID: 10005 Comm: syz-executor.1 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 2283.137627][T10005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2283.147903][T10005] Call Trace: [ 2283.151353][T10005] [ 2283.154451][T10005] dump_stack_lvl+0x1bf/0x240 [ 2283.159406][T10005] dump_stack+0x1e/0x20 [ 2283.163817][T10005] should_fail_ex+0x748/0x7f0 [ 2283.168814][T10005] __should_failslab+0x188/0x1f0 [ 2283.174051][T10005] should_failslab+0x2d/0x70 [ 2283.178911][T10005] kmem_cache_alloc+0xe6/0xa90 [ 2283.183943][T10005] ? dst_alloc+0x19b/0x240 [ 2283.188670][T10005] dst_alloc+0x19b/0x240 [ 2283.193192][T10005] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2283.199309][T10005] ip_route_output_key_hash_rcu+0x210d/0x3810 [ 2283.205804][T10005] ip_route_output_key_hash+0x12d/0x190 [ 2283.211669][T10005] tcp_v4_connect+0x990/0x1da0 [ 2283.216769][T10005] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2283.222891][T10005] ? tcp_twsk_unique+0xa80/0xa80 [ 2283.228108][T10005] mptcp_connect+0x728/0x1140 [ 2283.233090][T10005] ? mptcp_close+0x1c0/0x1c0 [ 2283.237965][T10005] __inet_stream_connect+0x2ed/0x1740 [ 2283.243616][T10005] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 2283.250164][T10005] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2283.256274][T10005] ? __local_bh_enable_ip+0x74/0xa0 [ 2283.261778][T10005] ? lock_sock_nested+0x1dd/0x1f0 [ 2283.267171][T10005] inet_stream_connect+0x6a/0xd0 [ 2283.272378][T10005] __sys_connect+0x5f9/0x680 [ 2283.277263][T10005] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2283.283380][T10005] ? __inet_stream_connect+0x1740/0x1740 [ 2283.289281][T10005] __x64_sys_connect+0x91/0xe0 [ 2283.294317][T10005] do_syscall_64+0x44/0x110 [ 2283.299054][T10005] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2283.305200][T10005] RIP: 0033:0x7f7958c7cae9 [ 2283.309848][T10005] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2283.329739][T10005] RSP: 002b:00007f795991f0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 2283.338515][T10005] RAX: ffffffffffffffda RBX: 00007f7958d9bf80 RCX: 00007f7958c7cae9 [ 2283.346714][T10005] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 0000000000000004 [ 2283.354909][T10005] RBP: 00007f795991f120 R08: 0000000000000000 R09: 0000000000000000 [ 2283.363108][T10005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2283.371293][T10005] R13: 000000000000000b R14: 00007f7958d9bf80 R15: 00007f7958ebfa48 [ 2283.379493][T10005] 01:55:09 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (fail_nth: 7) [ 2283.382703][ C1] vkms_vblank_simulate: vblank timer overrun 01:55:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x900}, 0x0) [ 2283.462626][T10011] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2283.472216][T10011] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2283.482035][T10012] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:10 executing program 5: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0xae}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2283.623351][T10014] FAULT_INJECTION: forcing a failure. [ 2283.623351][T10014] name failslab, interval 1, probability 0, space 0, times 0 [ 2283.636953][T10014] CPU: 1 PID: 10014 Comm: syz-executor.0 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 2283.647762][T10014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2283.658045][T10014] Call Trace: [ 2283.661507][T10014] [ 2283.664604][T10014] dump_stack_lvl+0x1bf/0x240 [ 2283.669551][T10014] dump_stack+0x1e/0x20 [ 2283.673956][T10014] should_fail_ex+0x748/0x7f0 [ 2283.678963][T10014] __should_failslab+0x188/0x1f0 [ 2283.684190][T10014] should_failslab+0x2d/0x70 [ 2283.689017][T10014] kmem_cache_alloc+0xe6/0xa90 [ 2283.694026][T10014] ? dst_alloc+0x19b/0x240 [ 2283.698928][T10014] dst_alloc+0x19b/0x240 [ 2283.703432][T10014] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2283.709546][T10014] ip_route_output_key_hash_rcu+0x210d/0x3810 [ 2283.716069][T10014] ip_route_output_key_hash+0x12d/0x190 [ 2283.721940][T10014] tcp_v4_connect+0x990/0x1da0 [ 2283.726995][T10014] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2283.733090][T10014] ? tcp_twsk_unique+0xa80/0xa80 [ 2283.738285][T10014] mptcp_connect+0x728/0x1140 [ 2283.743238][T10014] ? mptcp_close+0x1c0/0x1c0 [ 2283.748177][T10014] __inet_stream_connect+0x2ed/0x1740 [ 2283.753792][T10014] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 2283.760313][T10014] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2283.766400][T10014] ? __local_bh_enable_ip+0x74/0xa0 [ 2283.771887][T10014] ? lock_sock_nested+0x1dd/0x1f0 [ 2283.777167][T10014] inet_stream_connect+0x6a/0xd0 [ 2283.782356][T10014] __sys_connect+0x5f9/0x680 [ 2283.787203][T10014] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2283.793301][T10014] ? __inet_stream_connect+0x1740/0x1740 [ 2283.799186][T10014] __x64_sys_connect+0x91/0xe0 [ 2283.804212][T10014] do_syscall_64+0x44/0x110 [ 2283.808949][T10014] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2283.815111][T10014] RIP: 0033:0x7fdd6f47cae9 [ 2283.819729][T10014] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2283.839595][T10014] RSP: 002b:00007fdd700f70c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 2283.848279][T10014] RAX: ffffffffffffffda RBX: 00007fdd6f59bf80 RCX: 00007fdd6f47cae9 [ 2283.856466][T10014] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 0000000000000004 [ 2283.864704][T10014] RBP: 00007fdd700f7120 R08: 0000000000000000 R09: 0000000000000000 01:55:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (fail_nth: 8) [ 2283.872877][T10014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2283.881049][T10014] R13: 000000000000000b R14: 00007fdd6f59bf80 R15: 00007fdd6f6bfa48 [ 2283.889254][T10014] [ 2283.892608][ C1] vkms_vblank_simulate: vblank timer overrun [ 2283.905199][T10016] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2283.913951][T10016] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:10 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x60ff}, 0x0) 01:55:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x104d}, 0x0) [ 2284.028942][T10019] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 2284.039560][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2284.080680][T10020] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 01:55:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (fail_nth: 9) [ 2284.159061][T10022] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2284.170472][T10022] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xa00}, 0x0) 01:55:10 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (fail_nth: 8) [ 2284.305705][T10024] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0xae}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:55:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x1100}, 0x0) [ 2284.471187][T10027] FAULT_INJECTION: forcing a failure. [ 2284.471187][T10027] name failslab, interval 1, probability 0, space 0, times 0 [ 2284.471287][T10028] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2284.471498][T10028] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2284.487787][T10027] CPU: 1 PID: 10027 Comm: syz-executor.1 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 2284.510247][T10027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2284.520515][T10027] Call Trace: [ 2284.523964][T10027] [ 2284.527068][T10027] dump_stack_lvl+0x1bf/0x240 [ 2284.532025][T10027] dump_stack+0x1e/0x20 [ 2284.536440][T10027] should_fail_ex+0x748/0x7f0 [ 2284.541451][T10027] __should_failslab+0x188/0x1f0 [ 2284.546689][T10027] should_failslab+0x2d/0x70 [ 2284.551549][T10027] kmem_cache_alloc+0xe6/0xa90 [ 2284.556603][T10027] ? dst_alloc+0x19b/0x240 [ 2284.561317][T10027] dst_alloc+0x19b/0x240 [ 2284.565836][T10027] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2284.571939][T10027] ip_route_output_key_hash_rcu+0x210d/0x3810 [ 2284.578345][T10027] ip_route_output_flow+0x14f/0x320 [ 2284.583854][T10027] tcp_v4_connect+0xa71/0x1da0 [ 2284.588929][T10027] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2284.595042][T10027] ? tcp_twsk_unique+0xa80/0xa80 [ 2284.600255][T10027] mptcp_connect+0x728/0x1140 [ 2284.605203][T10027] ? mptcp_close+0x1c0/0x1c0 [ 2284.610049][T10027] __inet_stream_connect+0x2ed/0x1740 [ 2284.615672][T10027] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 2284.622199][T10027] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2284.628283][T10027] ? __local_bh_enable_ip+0x74/0xa0 [ 2284.633760][T10027] ? lock_sock_nested+0x1dd/0x1f0 [ 2284.639046][T10027] inet_stream_connect+0x6a/0xd0 [ 2284.644239][T10027] __sys_connect+0x5f9/0x680 [ 2284.649090][T10027] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2284.655199][T10027] ? __inet_stream_connect+0x1740/0x1740 [ 2284.661087][T10027] __x64_sys_connect+0x91/0xe0 [ 2284.666117][T10027] do_syscall_64+0x44/0x110 [ 2284.670859][T10027] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2284.676999][T10027] RIP: 0033:0x7f7958c7cae9 [ 2284.681632][T10027] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2284.701509][T10027] RSP: 002b:00007f795991f0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 2284.710194][T10027] RAX: ffffffffffffffda RBX: 00007f7958d9bf80 RCX: 00007f7958c7cae9 01:55:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x6558}, 0x0) [ 2284.718376][T10027] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 0000000000000004 [ 2284.726550][T10027] RBP: 00007f795991f120 R08: 0000000000000000 R09: 0000000000000000 [ 2284.734735][T10027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2284.742903][T10027] R13: 000000000000000b R14: 00007f7958d9bf80 R15: 00007f7958ebfa48 [ 2284.751102][T10027] [ 2284.754423][ C1] vkms_vblank_simulate: vblank timer overrun [ 2284.797813][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. 01:55:11 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (fail_nth: 9) [ 2284.867097][T10032] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2284.876239][T10032] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2284.907050][T10034] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 01:55:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x1200}, 0x0) 01:55:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xb00}, 0x0) 01:55:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (fail_nth: 10) [ 2285.122591][T10036] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2285.182703][T10039] FAULT_INJECTION: forcing a failure. [ 2285.182703][T10039] name failslab, interval 1, probability 0, space 0, times 0 [ 2285.195909][T10039] CPU: 1 PID: 10039 Comm: syz-executor.0 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 2285.206608][T10039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2285.216969][T10039] Call Trace: [ 2285.220421][T10039] [ 2285.223517][T10039] dump_stack_lvl+0x1bf/0x240 [ 2285.228462][T10039] dump_stack+0x1e/0x20 [ 2285.232853][T10039] should_fail_ex+0x748/0x7f0 [ 2285.237841][T10039] __should_failslab+0x188/0x1f0 [ 2285.243088][T10039] should_failslab+0x2d/0x70 [ 2285.247938][T10039] kmem_cache_alloc+0xe6/0xa90 [ 2285.252955][T10039] ? dst_alloc+0x19b/0x240 [ 2285.257665][T10039] dst_alloc+0x19b/0x240 [ 2285.262167][T10039] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2285.268259][T10039] ip_route_output_key_hash_rcu+0x210d/0x3810 [ 2285.274642][T10039] ip_route_output_flow+0x14f/0x320 [ 2285.280115][T10039] tcp_v4_connect+0xa71/0x1da0 [ 2285.285164][T10039] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2285.291251][T10039] ? tcp_twsk_unique+0xa80/0xa80 [ 2285.296546][T10039] mptcp_connect+0x728/0x1140 [ 2285.301499][T10039] ? mptcp_close+0x1c0/0x1c0 [ 2285.306359][T10039] __inet_stream_connect+0x2ed/0x1740 [ 2285.312026][T10039] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 2285.318560][T10039] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2285.324646][T10039] ? __local_bh_enable_ip+0x74/0xa0 [ 2285.330122][T10039] ? lock_sock_nested+0x1dd/0x1f0 [ 2285.335425][T10039] inet_stream_connect+0x6a/0xd0 [ 2285.340630][T10039] __sys_connect+0x5f9/0x680 [ 2285.345495][T10039] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2285.351604][T10039] ? __inet_stream_connect+0x1740/0x1740 [ 2285.357507][T10039] __x64_sys_connect+0x91/0xe0 [ 2285.362538][T10039] do_syscall_64+0x44/0x110 [ 2285.367276][T10039] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2285.373415][T10039] RIP: 0033:0x7fdd6f47cae9 [ 2285.378134][T10039] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2285.397995][T10039] RSP: 002b:00007fdd700f70c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 2285.406684][T10039] RAX: ffffffffffffffda RBX: 00007fdd6f59bf80 RCX: 00007fdd6f47cae9 [ 2285.414881][T10039] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 0000000000000004 [ 2285.423077][T10039] RBP: 00007fdd700f7120 R08: 0000000000000000 R09: 0000000000000000 [ 2285.431247][T10039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2285.439412][T10039] R13: 000000000000000b R14: 00007fdd6f59bf80 R15: 00007fdd6f6bfa48 [ 2285.447611][T10039] [ 2285.450965][ C1] vkms_vblank_simulate: vblank timer overrun [ 2285.482266][T10040] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2285.490887][T10040] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x6800}, 0x0) 01:55:12 executing program 5: socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0xae}}}}}, @RTA_OIF={0x8, 0x4, r0}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:55:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x2439}, 0x0) 01:55:12 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (fail_nth: 10) [ 2285.831812][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2285.842560][T10049] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2285.862627][T10051] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2285.871483][T10051] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xc00}, 0x0) 01:55:12 executing program 5: socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0xae}}}}}, @RTA_OIF={0x8, 0x4, r0}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:55:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x6c00}, 0x0) 01:55:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (fail_nth: 11) [ 2286.131508][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2286.144321][T10056] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x243b}, 0x0) [ 2286.193266][T10059] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:12 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (fail_nth: 11) [ 2286.286438][T10061] FAULT_INJECTION: forcing a failure. [ 2286.286438][T10061] name failslab, interval 1, probability 0, space 0, times 0 [ 2286.299555][T10061] CPU: 0 PID: 10061 Comm: syz-executor.1 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 2286.310246][T10061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2286.321216][T10061] Call Trace: [ 2286.324676][T10061] [ 2286.327812][T10061] dump_stack_lvl+0x1bf/0x240 [ 2286.332764][T10061] dump_stack+0x1e/0x20 [ 2286.337166][T10061] should_fail_ex+0x748/0x7f0 [ 2286.342160][T10061] __should_failslab+0x188/0x1f0 [ 2286.347403][T10061] should_failslab+0x2d/0x70 [ 2286.352250][T10061] kmem_cache_alloc+0xe6/0xa90 [ 2286.357361][T10061] ? __inet_hash_connect+0xfb9/0x3250 [ 2286.363091][T10061] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 2286.369665][T10061] __inet_hash_connect+0xfb9/0x3250 [ 2286.375155][T10061] ? __inet_bhash2_update_saddr+0x91a/0x2920 [ 2286.381422][T10061] ? inet_hash_connect+0x190/0x190 [ 2286.386789][T10061] inet_hash_connect+0x142/0x190 [ 2286.391983][T10061] tcp_v4_connect+0x1374/0x1da0 [ 2286.397126][T10061] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2286.403215][T10061] ? tcp_twsk_unique+0xa80/0xa80 [ 2286.408419][T10061] mptcp_connect+0x728/0x1140 [ 2286.413388][T10061] ? mptcp_close+0x1c0/0x1c0 [ 2286.418250][T10061] __inet_stream_connect+0x2ed/0x1740 [ 2286.423911][T10061] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 2286.430460][T10061] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2286.436578][T10061] ? __local_bh_enable_ip+0x74/0xa0 [ 2286.442068][T10061] ? lock_sock_nested+0x1dd/0x1f0 [ 2286.447350][T10061] inet_stream_connect+0x6a/0xd0 [ 2286.452549][T10061] __sys_connect+0x5f9/0x680 [ 2286.457401][T10061] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2286.463495][T10061] ? __inet_stream_connect+0x1740/0x1740 [ 2286.469389][T10061] __x64_sys_connect+0x91/0xe0 [ 2286.474426][T10061] do_syscall_64+0x44/0x110 [ 2286.479171][T10061] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2286.485339][T10061] RIP: 0033:0x7f7958c7cae9 [ 2286.489992][T10061] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2286.509875][T10061] RSP: 002b:00007f795991f0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 2286.518562][T10061] RAX: ffffffffffffffda RBX: 00007f7958d9bf80 RCX: 00007f7958c7cae9 [ 2286.526744][T10061] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 0000000000000004 [ 2286.534921][T10061] RBP: 00007f795991f120 R08: 0000000000000000 R09: 0000000000000000 [ 2286.543098][T10061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2286.551264][T10061] R13: 000000000000000b R14: 00007f7958d9bf80 R15: 00007f7958ebfa48 [ 2286.559491][T10061] 01:55:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xd00}, 0x0) 01:55:13 executing program 5: socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0xae}}}}}, @RTA_OIF={0x8, 0x4, r0}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:55:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x7400}, 0x0) [ 2286.798296][T10065] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (fail_nth: 12) [ 2286.854794][T10069] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2286.927812][T10071] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2286.930072][T10070] FAULT_INJECTION: forcing a failure. [ 2286.930072][T10070] name failslab, interval 1, probability 0, space 0, times 0 [ 2286.948101][T10070] CPU: 1 PID: 10070 Comm: syz-executor.0 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 2286.958876][T10070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2286.969134][T10070] Call Trace: [ 2286.972567][T10070] [ 2286.975652][T10070] dump_stack_lvl+0x1bf/0x240 [ 2286.980583][T10070] dump_stack+0x1e/0x20 [ 2286.984964][T10070] should_fail_ex+0x748/0x7f0 [ 2286.989935][T10070] __should_failslab+0x188/0x1f0 [ 2286.995164][T10070] should_failslab+0x2d/0x70 [ 2286.999995][T10070] kmem_cache_alloc+0xe6/0xa90 [ 2287.004999][T10070] ? __inet_hash_connect+0xfb9/0x3250 [ 2287.010627][T10070] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 2287.017151][T10070] __inet_hash_connect+0xfb9/0x3250 [ 2287.022609][T10070] ? __inet_bhash2_update_saddr+0x91a/0x2920 [ 2287.028942][T10070] ? inet_hash_connect+0x190/0x190 [ 2287.034311][T10070] inet_hash_connect+0x142/0x190 [ 2287.039512][T10070] tcp_v4_connect+0x1374/0x1da0 [ 2287.044652][T10070] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2287.050755][T10070] ? tcp_twsk_unique+0xa80/0xa80 [ 2287.055950][T10070] mptcp_connect+0x728/0x1140 [ 2287.060900][T10070] ? mptcp_close+0x1c0/0x1c0 [ 2287.065745][T10070] __inet_stream_connect+0x2ed/0x1740 [ 2287.071358][T10070] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 2287.077877][T10070] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2287.083973][T10070] ? __local_bh_enable_ip+0x74/0xa0 [ 2287.089457][T10070] ? lock_sock_nested+0x1dd/0x1f0 [ 2287.094740][T10070] inet_stream_connect+0x6a/0xd0 [ 2287.099921][T10070] __sys_connect+0x5f9/0x680 [ 2287.104780][T10070] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2287.110870][T10070] ? __inet_stream_connect+0x1740/0x1740 [ 2287.116770][T10070] __x64_sys_connect+0x91/0xe0 [ 2287.121796][T10070] do_syscall_64+0x44/0x110 [ 2287.126530][T10070] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2287.132669][T10070] RIP: 0033:0x7fdd6f47cae9 [ 2287.137287][T10070] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2287.157160][T10070] RSP: 002b:00007fdd700f70c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 2287.165836][T10070] RAX: ffffffffffffffda RBX: 00007fdd6f59bf80 RCX: 00007fdd6f47cae9 [ 2287.174026][T10070] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 0000000000000004 [ 2287.182198][T10070] RBP: 00007fdd700f7120 R08: 0000000000000000 R09: 0000000000000000 [ 2287.190371][T10070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2287.198538][T10070] R13: 000000000000000b R14: 00007fdd6f59bf80 R15: 00007fdd6f6bfa48 [ 2287.206734][T10070] [ 2287.210042][ C1] vkms_vblank_simulate: vblank timer overrun 01:55:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x7421}, 0x0) 01:55:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0xae}}}}}, @RTA_OIF={0x8}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:55:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xe00}, 0x0) 01:55:13 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (fail_nth: 12) 01:55:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x2500}, 0x0) [ 2287.522576][T10073] FAULT_INJECTION: forcing a failure. [ 2287.522576][T10073] name failslab, interval 1, probability 0, space 0, times 0 [ 2287.535630][T10073] CPU: 1 PID: 10073 Comm: syz-executor.1 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 2287.546319][T10073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2287.556636][T10073] Call Trace: [ 2287.560089][T10073] [ 2287.563196][T10073] dump_stack_lvl+0x1bf/0x240 [ 2287.568165][T10073] dump_stack+0x1e/0x20 [ 2287.572583][T10073] should_fail_ex+0x748/0x7f0 [ 2287.577596][T10073] __should_failslab+0x188/0x1f0 [ 2287.582849][T10073] should_failslab+0x2d/0x70 [ 2287.587702][T10073] kmem_cache_alloc+0xe6/0xa90 [ 2287.593002][T10073] ? __inet_hash_connect+0x2162/0x3250 [ 2287.598768][T10073] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 2287.605437][T10073] __inet_hash_connect+0x2162/0x3250 [ 2287.611036][T10073] ? __inet_bhash2_update_saddr+0x91a/0x2920 [ 2287.617351][T10073] inet_hash_connect+0x142/0x190 [ 2287.619541][T10078] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2287.622489][T10073] tcp_v4_connect+0x1374/0x1da0 [ 2287.634855][T10073] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2287.640978][T10073] ? tcp_twsk_unique+0xa80/0xa80 [ 2287.646205][T10073] mptcp_connect+0x728/0x1140 [ 2287.651180][T10073] ? mptcp_close+0x1c0/0x1c0 [ 2287.656053][T10073] __inet_stream_connect+0x2ed/0x1740 [ 2287.661707][T10073] ? do_softirq+0xac/0xf0 [ 2287.666322][T10073] ? __local_bh_enable_ip+0x74/0xa0 [ 2287.671823][T10073] ? lock_sock_nested+0x1dd/0x1f0 [ 2287.677129][T10073] inet_stream_connect+0x6a/0xd0 [ 2287.682340][T10073] __sys_connect+0x5f9/0x680 [ 2287.687221][T10073] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2287.693335][T10073] ? __inet_stream_connect+0x1740/0x1740 [ 2287.699273][T10073] __x64_sys_connect+0x91/0xe0 [ 2287.704321][T10073] do_syscall_64+0x44/0x110 [ 2287.709095][T10073] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2287.715262][T10073] RIP: 0033:0x7f7958c7cae9 01:55:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0xae}}}}}, @RTA_OIF={0x8}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2287.719902][T10073] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2287.740057][T10073] RSP: 002b:00007f795991f0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 2287.748758][T10073] RAX: ffffffffffffffda RBX: 00007f7958d9bf80 RCX: 00007f7958c7cae9 [ 2287.756974][T10073] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 0000000000000004 [ 2287.765166][T10073] RBP: 00007f795991f120 R08: 0000000000000000 R09: 0000000000000000 [ 2287.773361][T10073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2287.781557][T10073] R13: 000000000000000b R14: 00007f7958d9bf80 R15: 00007f7958ebfa48 [ 2287.789761][T10073] [ 2287.793096][ C1] vkms_vblank_simulate: vblank timer overrun 01:55:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x7a00}, 0x0) [ 2287.948540][T10082] validate_nla: 3 callbacks suppressed [ 2287.948608][T10082] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2287.972937][T10082] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2288.001372][T10084] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2288.010263][T10084] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2288.028078][T10083] FAULT_INJECTION: forcing a failure. [ 2288.028078][T10083] name failslab, interval 1, probability 0, space 0, times 0 [ 2288.041030][T10083] CPU: 0 PID: 10083 Comm: syz-executor.0 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 2288.051718][T10083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2288.061988][T10083] Call Trace: [ 2288.065439][T10083] [ 2288.068543][T10083] dump_stack_lvl+0x1bf/0x240 [ 2288.073511][T10083] dump_stack+0x1e/0x20 [ 2288.077909][T10083] should_fail_ex+0x748/0x7f0 [ 2288.082920][T10083] __should_failslab+0x188/0x1f0 [ 2288.088157][T10083] should_failslab+0x2d/0x70 [ 2288.093008][T10083] kmem_cache_alloc+0xe6/0xa90 [ 2288.098041][T10083] ? __inet_hash_connect+0x2162/0x3250 [ 2288.103793][T10083] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 2288.110389][T10083] __inet_hash_connect+0x2162/0x3250 [ 2288.115967][T10083] ? __inet_bhash2_update_saddr+0x91a/0x2920 [ 2288.122376][T10083] inet_hash_connect+0x142/0x190 [ 2288.127611][T10083] tcp_v4_connect+0x1374/0x1da0 [ 2288.132770][T10083] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2288.138881][T10083] ? tcp_twsk_unique+0xa80/0xa80 [ 2288.144107][T10083] mptcp_connect+0x728/0x1140 [ 2288.149094][T10083] ? mptcp_close+0x1c0/0x1c0 [ 2288.153969][T10083] __inet_stream_connect+0x2ed/0x1740 [ 2288.159613][T10083] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 2288.166174][T10083] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2288.172291][T10083] ? __local_bh_enable_ip+0x74/0xa0 [ 2288.177878][T10083] ? lock_sock_nested+0x1dd/0x1f0 [ 2288.183193][T10083] inet_stream_connect+0x6a/0xd0 [ 2288.188423][T10083] __sys_connect+0x5f9/0x680 [ 2288.193310][T10083] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2288.199426][T10083] ? __inet_stream_connect+0x1740/0x1740 [ 2288.205341][T10083] __x64_sys_connect+0x91/0xe0 [ 2288.210394][T10083] do_syscall_64+0x44/0x110 [ 2288.215675][T10083] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2288.221834][T10083] RIP: 0033:0x7fdd6f47cae9 [ 2288.226474][T10083] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2288.246340][T10083] RSP: 002b:00007fdd700f70c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 2288.255024][T10083] RAX: ffffffffffffffda RBX: 00007fdd6f59bf80 RCX: 00007fdd6f47cae9 [ 2288.263216][T10083] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 0000000000000004 [ 2288.271392][T10083] RBP: 00007fdd700f7120 R08: 0000000000000000 R09: 0000000000000000 [ 2288.279578][T10083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2288.287751][T10083] R13: 000000000000000b R14: 00007fdd6f59bf80 R15: 00007fdd6f6bfa48 [ 2288.295957][T10083] 01:55:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xf00}, 0x0) 01:55:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x3924}, 0x0) 01:55:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (fail_nth: 13) 01:55:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0xae}}}}}, @RTA_OIF={0x8}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2288.442406][T10087] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:15 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (fail_nth: 13) 01:55:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8100}, 0x0) [ 2288.741017][T10091] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2288.749990][T10091] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2288.763899][T10097] FAULT_INJECTION: forcing a failure. [ 2288.763899][T10097] name failslab, interval 1, probability 0, space 0, times 0 [ 2288.777376][T10097] CPU: 1 PID: 10097 Comm: syz-executor.1 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 2288.788072][T10097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2288.798352][T10097] Call Trace: [ 2288.801817][T10097] [ 2288.803913][T10098] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2288.804841][T10097] dump_stack_lvl+0x1bf/0x240 [ 2288.813112][T10098] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2288.817664][T10097] dump_stack+0x1e/0x20 [ 2288.829425][T10097] should_fail_ex+0x748/0x7f0 [ 2288.834423][T10097] __should_failslab+0x188/0x1f0 [ 2288.839674][T10097] should_failslab+0x2d/0x70 [ 2288.844532][T10097] kmem_cache_alloc+0xe6/0xa90 [ 2288.849562][T10097] ? dst_alloc+0x19b/0x240 [ 2288.854288][T10097] dst_alloc+0x19b/0x240 [ 2288.858822][T10097] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2288.864958][T10097] ip_route_output_key_hash_rcu+0x210d/0x3810 [ 2288.871383][T10097] ip_route_output_flow+0x14f/0x320 [ 2288.875656][T10100] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2288.876795][T10097] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 01:55:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x3b24}, 0x0) [ 2288.890185][T10097] ip_route_newports+0x122/0x170 [ 2288.895420][T10097] tcp_v4_connect+0x1538/0x1da0 [ 2288.900599][T10097] ? tcp_twsk_unique+0xa80/0xa80 [ 2288.905810][T10097] mptcp_connect+0x728/0x1140 [ 2288.910780][T10097] ? mptcp_close+0x1c0/0x1c0 [ 2288.915641][T10097] __inet_stream_connect+0x2ed/0x1740 [ 2288.921279][T10097] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 2288.927843][T10097] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2288.933988][T10097] ? __local_bh_enable_ip+0x74/0xa0 [ 2288.939472][T10097] ? lock_sock_nested+0x1dd/0x1f0 [ 2288.944775][T10097] inet_stream_connect+0x6a/0xd0 [ 2288.949985][T10097] __sys_connect+0x5f9/0x680 [ 2288.954864][T10097] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2288.960993][T10097] ? __inet_stream_connect+0x1740/0x1740 [ 2288.966901][T10097] __x64_sys_connect+0x91/0xe0 [ 2288.971952][T10097] do_syscall_64+0x44/0x110 [ 2288.976709][T10097] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2288.982871][T10097] RIP: 0033:0x7f7958c7cae9 [ 2288.987520][T10097] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2289.007411][T10097] RSP: 002b:00007f795991f0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 2289.016104][T10097] RAX: ffffffffffffffda RBX: 00007f7958d9bf80 RCX: 00007f7958c7cae9 [ 2289.024397][T10097] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 0000000000000004 [ 2289.032572][T10097] RBP: 00007f795991f120 R08: 0000000000000000 R09: 0000000000000000 [ 2289.040744][T10097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2289.048907][T10097] R13: 000000000000000b R14: 00007f7958d9bf80 R15: 00007f7958ebfa48 [ 2289.057110][T10097] [ 2289.060316][ C1] vkms_vblank_simulate: vblank timer overrun [ 2289.087202][T10096] FAULT_INJECTION: forcing a failure. [ 2289.087202][T10096] name failslab, interval 1, probability 0, space 0, times 0 [ 2289.108143][T10096] CPU: 0 PID: 10096 Comm: syz-executor.0 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 2289.118853][T10096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2289.129213][T10096] Call Trace: [ 2289.132662][T10096] [ 2289.135760][T10096] dump_stack_lvl+0x1bf/0x240 [ 2289.140706][T10096] dump_stack+0x1e/0x20 [ 2289.145107][T10096] should_fail_ex+0x748/0x7f0 [ 2289.150088][T10096] __should_failslab+0x188/0x1f0 [ 2289.155310][T10096] should_failslab+0x2d/0x70 [ 2289.160149][T10096] kmem_cache_alloc+0xe6/0xa90 [ 2289.165158][T10096] ? dst_alloc+0x19b/0x240 [ 2289.169879][T10096] dst_alloc+0x19b/0x240 [ 2289.174398][T10096] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2289.180519][T10096] ip_route_output_key_hash_rcu+0x210d/0x3810 [ 2289.186923][T10096] ip_route_output_flow+0x14f/0x320 [ 2289.192416][T10096] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2289.198552][T10096] ip_route_newports+0x122/0x170 [ 2289.203786][T10096] tcp_v4_connect+0x1538/0x1da0 [ 2289.208968][T10096] ? tcp_twsk_unique+0xa80/0xa80 [ 2289.214189][T10096] mptcp_connect+0x728/0x1140 [ 2289.219162][T10096] ? mptcp_close+0x1c0/0x1c0 [ 2289.224030][T10096] __inet_stream_connect+0x2ed/0x1740 [ 2289.229672][T10096] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 2289.236222][T10096] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2289.242463][T10096] ? __local_bh_enable_ip+0x74/0xa0 [ 2289.247969][T10096] ? lock_sock_nested+0x1dd/0x1f0 [ 2289.253285][T10096] inet_stream_connect+0x6a/0xd0 [ 2289.258514][T10096] __sys_connect+0x5f9/0x680 [ 2289.263488][T10096] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2289.269614][T10096] ? __inet_stream_connect+0x1740/0x1740 [ 2289.275532][T10096] __x64_sys_connect+0x91/0xe0 [ 2289.280596][T10096] do_syscall_64+0x44/0x110 [ 2289.285352][T10096] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2289.291529][T10096] RIP: 0033:0x7fdd6f47cae9 [ 2289.296166][T10096] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2289.316082][T10096] RSP: 002b:00007fdd700f70c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 2289.324806][T10096] RAX: ffffffffffffffda RBX: 00007fdd6f59bf80 RCX: 00007fdd6f47cae9 01:55:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x1052}, 0x0) 01:55:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x820d}, 0x0) 01:55:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0xae}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2289.333002][T10096] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 0000000000000004 [ 2289.341177][T10096] RBP: 00007fdd700f7120 R08: 0000000000000000 R09: 0000000000000000 [ 2289.349610][T10096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2289.357781][T10096] R13: 000000000000000b R14: 00007fdd6f59bf80 R15: 00007fdd6f6bfa48 [ 2289.365982][T10096] 01:55:16 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (fail_nth: 14) [ 2289.561886][T10102] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (fail_nth: 14) [ 2289.668147][T10107] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2289.677205][T10107] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2289.688555][T10108] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2289.697162][T10108] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:16 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8847}, 0x0) 01:55:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0xae}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:55:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x3f00}, 0x0) 01:55:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x1100}, 0x0) [ 2289.906436][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2289.966191][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2289.966935][T10115] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:16 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (fail_nth: 15) 01:55:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0xae}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:55:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (fail_nth: 15) [ 2290.132788][T10119] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2290.142173][T10119] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:16 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x0) [ 2290.201785][T10120] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2290.211354][T10120] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x1200}, 0x0) [ 2290.436095][T10127] FAULT_INJECTION: forcing a failure. [ 2290.436095][T10127] name failslab, interval 1, probability 0, space 0, times 0 [ 2290.442255][T10126] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2290.449306][T10127] CPU: 1 PID: 10127 Comm: syz-executor.0 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 2290.466853][T10127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2290.477127][T10127] Call Trace: [ 2290.480582][T10127] [ 2290.483680][T10127] dump_stack_lvl+0x1bf/0x240 [ 2290.488631][T10127] dump_stack+0x1e/0x20 [ 2290.493039][T10127] should_fail_ex+0x748/0x7f0 [ 2290.498044][T10127] __should_failslab+0x188/0x1f0 [ 2290.503298][T10127] should_failslab+0x2d/0x70 [ 2290.508165][T10127] kmem_cache_alloc_node+0xe7/0xb10 [ 2290.513653][T10127] ? __alloc_skb+0x1e5/0x740 [ 2290.518526][T10127] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 2290.525095][T10127] __alloc_skb+0x1e5/0x740 [ 2290.529830][T10127] tcp_stream_alloc_skb+0x4d/0x5c0 [ 2290.535242][T10127] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2290.541368][T10127] tcp_connect+0x2234/0x6fa0 [ 2290.546234][T10127] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2290.552415][T10127] tcp_v4_connect+0x1bf9/0x1da0 [ 2290.557592][T10127] ? tcp_twsk_unique+0xa80/0xa80 [ 2290.562815][T10127] mptcp_connect+0x728/0x1140 [ 2290.567801][T10127] ? mptcp_close+0x1c0/0x1c0 [ 2290.572680][T10127] __inet_stream_connect+0x2ed/0x1740 [ 2290.578336][T10127] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 2290.584886][T10127] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2290.591005][T10127] ? __local_bh_enable_ip+0x74/0xa0 [ 2290.596524][T10127] ? lock_sock_nested+0x1dd/0x1f0 [ 2290.601863][T10127] inet_stream_connect+0x6a/0xd0 [ 2290.607091][T10127] __sys_connect+0x5f9/0x680 [ 2290.611982][T10127] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2290.618142][T10127] ? __inet_stream_connect+0x1740/0x1740 [ 2290.624071][T10127] __x64_sys_connect+0x91/0xe0 [ 2290.629168][T10127] do_syscall_64+0x44/0x110 01:55:17 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0xfc00}, 0x0) [ 2290.634027][T10127] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2290.640242][T10127] RIP: 0033:0x7fdd6f47cae9 [ 2290.645149][T10127] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2290.665061][T10127] RSP: 002b:00007fdd700f70c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 2290.673893][T10127] RAX: ffffffffffffffda RBX: 00007fdd6f59bf80 RCX: 00007fdd6f47cae9 01:55:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) 01:55:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x4788}, 0x0) [ 2290.682109][T10127] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 0000000000000004 [ 2290.690324][T10127] RBP: 00007fdd700f7120 R08: 0000000000000000 R09: 0000000000000000 [ 2290.699228][T10127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2290.707536][T10127] R13: 000000000000000b R14: 00007fdd6f59bf80 R15: 00007fdd6f6bfa48 [ 2290.715755][T10127] [ 2290.719178][ C1] vkms_vblank_simulate: vblank timer overrun [ 2290.754570][T10128] FAULT_INJECTION: forcing a failure. [ 2290.754570][T10128] name failslab, interval 1, probability 0, space 0, times 0 [ 2290.770197][T10128] CPU: 0 PID: 10128 Comm: syz-executor.1 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 2290.780897][T10128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2290.791264][T10128] Call Trace: [ 2290.794715][T10128] [ 2290.797827][T10128] dump_stack_lvl+0x1bf/0x240 [ 2290.802790][T10128] dump_stack+0x1e/0x20 [ 2290.807182][T10128] should_fail_ex+0x748/0x7f0 [ 2290.812178][T10128] __should_failslab+0x188/0x1f0 [ 2290.817438][T10128] should_failslab+0x2d/0x70 [ 2290.822298][T10128] kmem_cache_alloc_node+0xe7/0xb10 [ 2290.827755][T10128] ? __alloc_skb+0x1e5/0x740 [ 2290.832609][T10128] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 2290.839175][T10128] __alloc_skb+0x1e5/0x740 [ 2290.843879][T10128] tcp_stream_alloc_skb+0x4d/0x5c0 [ 2290.849286][T10128] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2290.855404][T10128] tcp_connect+0x2234/0x6fa0 [ 2290.860269][T10128] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2290.866427][T10128] tcp_v4_connect+0x1bf9/0x1da0 [ 2290.871586][T10128] ? tcp_twsk_unique+0xa80/0xa80 [ 2290.876810][T10128] mptcp_connect+0x728/0x1140 [ 2290.881761][T10128] ? mptcp_close+0x1c0/0x1c0 [ 2290.886605][T10128] __inet_stream_connect+0x2ed/0x1740 [ 2290.892227][T10128] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 2290.898758][T10128] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2290.904856][T10128] ? __local_bh_enable_ip+0x74/0xa0 [ 2290.910331][T10128] ? lock_sock_nested+0x1dd/0x1f0 [ 2290.915611][T10128] inet_stream_connect+0x6a/0xd0 [ 2290.920798][T10128] __sys_connect+0x5f9/0x680 [ 2290.925647][T10128] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2290.931750][T10128] ? __inet_stream_connect+0x1740/0x1740 [ 2290.937639][T10128] __x64_sys_connect+0x91/0xe0 [ 2290.942669][T10128] do_syscall_64+0x44/0x110 [ 2290.947411][T10128] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2290.953553][T10128] RIP: 0033:0x7f7958c7cae9 [ 2290.958168][T10128] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2290.978032][T10128] RSP: 002b:00007f795991f0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 2290.986712][T10128] RAX: ffffffffffffffda RBX: 00007f7958d9bf80 RCX: 00007f7958c7cae9 [ 2290.994901][T10128] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 0000000000000005 [ 2291.003071][T10128] RBP: 00007f795991f120 R08: 0000000000000000 R09: 0000000000000000 [ 2291.011248][T10128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2291.019420][T10128] R13: 000000000000000b R14: 00007f7958d9bf80 R15: 00007f7958ebfa48 [ 2291.027620][T10128] 01:55:17 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (fail_nth: 16) 01:55:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x1fe3}, 0x0) [ 2291.282338][T10136] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2291.292033][T10136] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:17 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (fail_nth: 16) 01:55:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) 01:55:17 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (fail_nth: 17) [ 2291.423345][T10140] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2291.451315][T10142] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2291.460672][T10142] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x4800}, 0x0) 01:55:18 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0xff00}, 0x0) [ 2291.765352][T10148] FAULT_INJECTION: forcing a failure. [ 2291.765352][T10148] name failslab, interval 1, probability 0, space 0, times 0 [ 2291.778386][T10148] CPU: 0 PID: 10148 Comm: syz-executor.0 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 2291.789077][T10148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2291.799363][T10148] Call Trace: [ 2291.802816][T10148] [ 2291.805914][T10148] dump_stack_lvl+0x1bf/0x240 [ 2291.810861][T10148] dump_stack+0x1e/0x20 [ 2291.815259][T10148] should_fail_ex+0x748/0x7f0 [ 2291.820269][T10148] __should_failslab+0x188/0x1f0 [ 2291.825509][T10148] should_failslab+0x2d/0x70 [ 2291.830346][T10148] kmem_cache_alloc+0xe6/0xa90 [ 2291.835464][T10148] ? __nf_conntrack_alloc+0x1b8/0x690 [ 2291.841200][T10148] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 2291.847751][T10148] __nf_conntrack_alloc+0x1b8/0x690 [ 2291.853267][T10148] init_conntrack+0x2fd/0x1b70 [ 2291.858323][T10148] ? __siphash_unaligned+0x5d1/0xa30 01:55:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) [ 2291.863955][T10148] nf_conntrack_in+0x197b/0x30d0 [ 2291.869572][T10148] ipv4_conntrack_local+0x1ed/0x370 [ 2291.875033][T10148] ? ipv4_conntrack_in+0x40/0x40 [ 2291.880239][T10148] nf_hook_slow+0xef/0x3e0 [ 2291.884923][T10148] __ip_local_out+0x737/0x7c0 [ 2291.889916][T10148] ? __ip_local_out+0x7c0/0x7c0 [ 2291.895089][T10148] __ip_queue_xmit+0x1b55/0x1e00 [ 2291.900345][T10148] ? filter_irq_stacks+0x60/0x1a0 [ 2291.905652][T10148] ip_queue_xmit+0x60/0x80 [ 2291.910347][T10148] ? __ip_queue_xmit+0x1e00/0x1e00 [ 2291.915742][T10148] __tcp_transmit_skb+0x3b26/0x4c40 [ 2291.921239][T10148] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2291.927343][T10148] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2291.933449][T10148] tcp_connect+0x352e/0x6fa0 [ 2291.938281][T10148] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2291.944414][T10148] tcp_v4_connect+0x1bf9/0x1da0 [ 2291.949558][T10148] ? tcp_twsk_unique+0xa80/0xa80 [ 2291.954745][T10148] mptcp_connect+0x728/0x1140 [ 2291.959694][T10148] ? mptcp_close+0x1c0/0x1c0 [ 2291.964549][T10148] __inet_stream_connect+0x2ed/0x1740 [ 2291.970174][T10148] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 2291.976783][T10148] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2291.982865][T10148] ? __local_bh_enable_ip+0x74/0xa0 [ 2291.988341][T10148] ? lock_sock_nested+0x1dd/0x1f0 [ 2291.993624][T10148] inet_stream_connect+0x6a/0xd0 [ 2291.998821][T10148] __sys_connect+0x5f9/0x680 [ 2292.003671][T10148] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2292.009764][T10148] ? __inet_stream_connect+0x1740/0x1740 [ 2292.015650][T10148] __x64_sys_connect+0x91/0xe0 [ 2292.020768][T10148] do_syscall_64+0x44/0x110 [ 2292.025505][T10148] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2292.031646][T10148] RIP: 0033:0x7fdd6f47cae9 [ 2292.036265][T10148] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2292.056154][T10148] RSP: 002b:00007fdd700f70c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002a 01:55:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (fail_nth: 17) 01:55:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x1fe4}, 0x0) [ 2292.064839][T10148] RAX: ffffffffffffffda RBX: 00007fdd6f59bf80 RCX: 00007fdd6f47cae9 [ 2292.073034][T10148] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 0000000000000004 [ 2292.081216][T10148] RBP: 00007fdd700f7120 R08: 0000000000000000 R09: 0000000000000000 [ 2292.089387][T10148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2292.097644][T10148] R13: 000000000000000b R14: 00007fdd6f59bf80 R15: 00007fdd6f6bfa48 [ 2292.105842][T10148] [ 2292.158241][T10151] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2292.175504][T10153] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x4888}, 0x0) [ 2292.354248][T10158] FAULT_INJECTION: forcing a failure. [ 2292.354248][T10158] name failslab, interval 1, probability 0, space 0, times 0 [ 2292.375400][T10158] CPU: 0 PID: 10158 Comm: syz-executor.1 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 2292.386114][T10158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2292.396395][T10158] Call Trace: [ 2292.399840][T10158] [ 2292.402926][T10158] dump_stack_lvl+0x1bf/0x240 [ 2292.407901][T10158] dump_stack+0x1e/0x20 [ 2292.412300][T10158] should_fail_ex+0x748/0x7f0 [ 2292.417298][T10158] __should_failslab+0x188/0x1f0 [ 2292.422545][T10158] should_failslab+0x2d/0x70 [ 2292.427387][T10158] kmem_cache_alloc+0xe6/0xa90 [ 2292.432398][T10158] ? __nf_conntrack_alloc+0x1b8/0x690 [ 2292.438064][T10158] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 2292.444618][T10158] __nf_conntrack_alloc+0x1b8/0x690 [ 2292.450110][T10158] init_conntrack+0x2fd/0x1b70 [ 2292.455145][T10158] ? __siphash_unaligned+0x5d1/0xa30 [ 2292.460719][T10158] nf_conntrack_in+0x197b/0x30d0 [ 2292.465968][T10158] ipv4_conntrack_local+0x1ed/0x370 [ 2292.471413][T10158] ? ipv4_conntrack_in+0x40/0x40 [ 2292.476579][T10158] nf_hook_slow+0xef/0x3e0 [ 2292.481243][T10158] __ip_local_out+0x737/0x7c0 [ 2292.486228][T10158] ? __ip_local_out+0x7c0/0x7c0 [ 2292.491454][T10158] __ip_queue_xmit+0x1b55/0x1e00 [ 2292.496674][T10158] ? filter_irq_stacks+0x60/0x1a0 [ 2292.502068][T10158] ip_queue_xmit+0x60/0x80 [ 2292.506758][T10158] ? __ip_queue_xmit+0x1e00/0x1e00 [ 2292.512156][T10158] __tcp_transmit_skb+0x3b26/0x4c40 [ 2292.517617][T10158] ? tcp_connect+0x2930/0x6fa0 [ 2292.522630][T10158] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2292.528743][T10158] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2292.534843][T10158] tcp_connect+0x352e/0x6fa0 [ 2292.539673][T10158] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2292.545855][T10158] tcp_v4_connect+0x1bf9/0x1da0 [ 2292.551519][T10158] ? tcp_twsk_unique+0xa80/0xa80 [ 2292.556830][T10158] mptcp_connect+0x728/0x1140 [ 2292.562783][T10158] ? mptcp_close+0x1c0/0x1c0 [ 2292.567693][T10158] __inet_stream_connect+0x2ed/0x1740 [ 2292.573330][T10158] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 2292.579884][T10158] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2292.585980][T10158] ? __local_bh_enable_ip+0x74/0xa0 [ 2292.591466][T10158] ? lock_sock_nested+0x1dd/0x1f0 [ 2292.596748][T10158] inet_stream_connect+0x6a/0xd0 [ 2292.601942][T10158] __sys_connect+0x5f9/0x680 [ 2292.606811][T10158] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2292.612931][T10158] ? __inet_stream_connect+0x1740/0x1740 [ 2292.618822][T10158] __x64_sys_connect+0x91/0xe0 [ 2292.623856][T10158] do_syscall_64+0x44/0x110 [ 2292.628592][T10158] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2292.634736][T10158] RIP: 0033:0x7f7958c7cae9 [ 2292.639356][T10158] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2292.659232][T10158] RSP: 002b:00007f795991f0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 2292.667926][T10158] RAX: ffffffffffffffda RBX: 00007f7958d9bf80 RCX: 00007f7958c7cae9 [ 2292.676134][T10158] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 0000000000000004 [ 2292.684305][T10158] RBP: 00007f795991f120 R08: 0000000000000000 R09: 0000000000000000 [ 2292.692475][T10158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 01:55:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) [ 2292.700659][T10158] R13: 000000000000000b R14: 00007f7958d9bf80 R15: 00007f7958ebfa48 [ 2292.708860][T10158] 01:55:19 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x34000}, 0x0) 01:55:19 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) [ 2292.924274][T10164] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x2500}, 0x0) 01:55:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x4c00}, 0x0) 01:55:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) [ 2293.134089][T10167] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2293.180894][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2293.271312][T10171] validate_nla: 2 callbacks suppressed [ 2293.271378][T10171] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2293.287322][T10171] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) [ 2293.340789][T10173] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2293.349271][T10173] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:19 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x400300}, 0x0) 01:55:19 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x3, 0x4e22, @local}, 0x10) 01:55:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x3f00}, 0x0) 01:55:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 01:55:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x4d10}, 0x0) [ 2293.653753][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2293.684364][T10180] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:20 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) 01:55:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x3, 0x4e22, @local}, 0x10) [ 2293.844788][T10182] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2293.853605][T10182] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:20 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x4, 0x4e22, @local}, 0x10) 01:55:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 01:55:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x4788}, 0x0) [ 2293.994604][T10186] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2294.010206][T10186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2294.114572][T10190] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x5865}, 0x0) 01:55:20 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x5, 0x4e22, @local}, 0x10) [ 2294.262436][T10196] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2294.271162][T10196] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 01:55:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x4, 0x4e22, @local}, 0x10) [ 2294.422645][T10198] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2294.431675][T10198] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x4800}, 0x0) 01:55:21 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) [ 2294.667204][T10206] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2294.677019][T10206] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:21 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x7, 0x4e22, @local}, 0x10) 01:55:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x6000}, 0x0) 01:55:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x5, 0x4e22, @local}, 0x10) [ 2294.733076][T10208] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 01:55:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x4888}, 0x0) 01:55:21 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x3000000}, 0x0) [ 2295.042439][T10214] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2295.051042][T10214] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2295.137905][T10218] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2295.146630][T10218] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x7, 0x4e22, @local}, 0x10) 01:55:21 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x8, 0x4e22, @local}, 0x10) [ 2295.206901][T10220] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x0, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0xae}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:55:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x60ff}, 0x0) 01:55:21 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 01:55:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x4c00}, 0x0) [ 2295.548975][T10226] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2295.557845][T10226] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:22 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0xa, 0x4e22, @local}, 0x10) [ 2295.594520][T10232] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2295.624251][T10229] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x0, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0xae}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:55:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x8, 0x4e22, @local}, 0x10) 01:55:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x5210}, 0x0) 01:55:22 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5000000}, 0x0) 01:55:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x6558}, 0x0) 01:55:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0xa, 0x4e22, @local}, 0x10) 01:55:22 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0xc, 0x4e22, @local}, 0x10) [ 2296.042878][T10244] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2296.095711][T10243] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2296.104016][T10245] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:22 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x6000000}, 0x0) 01:55:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x0, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0xae}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:55:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x6800}, 0x0) 01:55:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x5865}, 0x0) [ 2296.484138][T10253] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0xc, 0x4e22, @local}, 0x10) 01:55:23 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x13, 0x4e22, @local}, 0x10) [ 2296.551525][T10254] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2296.601129][T10257] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:23 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) 01:55:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x3c, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0xae}}}}}, @RTA_OIF={0x8, 0x4, r1}]}, 0x3c}}, 0x0) 01:55:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x6000}, 0x0) 01:55:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x6c00}, 0x0) [ 2296.853621][T10261] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2296.881854][T10266] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x10, 0x4e22, @local}, 0x10) 01:55:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x3c, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0xae}}}}}, @RTA_OIF={0x8, 0x4, r1}]}, 0x3c}}, 0x0) 01:55:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x60ff}, 0x0) 01:55:23 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x14, 0x4e22, @local}, 0x10) 01:55:23 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) [ 2297.151716][T10269] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x7400}, 0x0) [ 2297.323122][T10278] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x3c, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0xae}}}}}, @RTA_OIF={0x8, 0x4, r1}]}, 0x3c}}, 0x0) [ 2297.412800][T10279] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:23 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x1c, 0x4e22, @local}, 0x10) 01:55:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x13, 0x4e22, @local}, 0x10) [ 2297.562787][T10281] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x6558}, 0x0) 01:55:24 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x9000000}, 0x0) 01:55:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x7a00}, 0x0) 01:55:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0xae}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6}]}, 0x44}}, 0x0) 01:55:24 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x1e, 0x4e22, @local}, 0x10) [ 2297.871898][T10291] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2297.902488][T10290] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2297.952491][T10293] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x6800}, 0x0) 01:55:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x14, 0x4e22, @local}, 0x10) 01:55:24 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0xa000000}, 0x0) 01:55:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x8100}, 0x0) 01:55:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0xae}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6}]}, 0x44}}, 0x0) [ 2298.348143][T10301] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2298.390023][T10302] validate_nla: 11 callbacks suppressed [ 2298.390091][T10302] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2298.414666][T10302] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:24 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x22, 0x4e22, @local}, 0x10) [ 2298.448966][T10306] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2298.457678][T10306] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0xb000000}, 0x0) 01:55:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x1c, 0x4e22, @local}, 0x10) 01:55:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0xae}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6}]}, 0x44}}, 0x0) 01:55:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x8847}, 0x0) 01:55:25 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2d, 0x4e22, @local}, 0x10) 01:55:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x6c00}, 0x0) [ 2298.766730][T10312] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000000}, 0x0) 01:55:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x1e, 0x4e22, @local}, 0x10) [ 2298.971916][T10320] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2298.980543][T10320] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2299.020622][T10319] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2299.034312][T10319] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:25 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x64, 0x4e22, @local}, 0x10) 01:55:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x7400}, 0x0) 01:55:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x8848}, 0x0) [ 2299.164713][T10324] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x3c, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0xae}}}}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x3c}}, 0x0) 01:55:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0xd000000}, 0x0) [ 2299.393164][T10331] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2299.402173][T10331] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x22, 0x4e22, @local}, 0x10) [ 2299.449369][T10332] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2299.458468][T10332] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:26 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x240, 0x4e22, @local}, 0x10) [ 2299.597686][T10336] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x3c, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0xae}}}}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x3c}}, 0x0) 01:55:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x7a00}, 0x0) 01:55:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xfc00}, 0x0) 01:55:26 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0xe000000}, 0x0) 01:55:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2d, 0x4e22, @local}, 0x10) [ 2299.922384][T10344] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2299.931040][T10344] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x3c, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0xae}}}}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x3c}}, 0x0) 01:55:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x8100}, 0x0) 01:55:26 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0xa, @local}, 0x10) [ 2300.095179][T10347] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2300.112857][T10348] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2300.122116][T10348] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:26 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0xf000000}, 0x0) 01:55:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xff00}, 0x0) [ 2300.292217][T10354] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2300.300992][T10354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x64, 0x4e22, @local}, 0x10) 01:55:26 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x64, @local}, 0x10) 01:55:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0xae}}}}}, @RTA_OIF={0x8}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:55:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x8847}, 0x0) [ 2300.542411][T10358] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2300.612537][T10361] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2300.621475][T10361] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:27 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) 01:55:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x34000}, 0x0) 01:55:27 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local={0x64}}, 0x10) 01:55:27 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x240, 0x4e22, @local}, 0x10) 01:55:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0xae}}}}}, @RTA_OIF={0x8}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2300.928619][T10368] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2301.060492][T10371] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2301.073602][T10372] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x8848}, 0x0) 01:55:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x400300}, 0x0) 01:55:27 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x11000000}, 0x0) 01:55:27 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0xa, @local}, 0x10) 01:55:27 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local={0xac, 0x2}}, 0x10) [ 2301.371526][T10380] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x1, {0x0, 0x0, 0x10, 0x0, 0xae}}}}}, @RTA_OIF={0x8}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2301.497863][T10385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2301.514513][T10383] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xe31f}, 0x0) 01:55:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x1000000}, 0x0) 01:55:28 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x12000000}, 0x0) 01:55:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x64, @local}, 0x10) 01:55:28 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local={0xac, 0x3}}, 0x10) [ 2301.870500][T10393] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2301.903080][T10395] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x2c, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x2c}}, 0x0) [ 2301.922304][T10396] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x2000000}, 0x0) 01:55:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xe41f}, 0x0) 01:55:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local={0x64}}, 0x10) 01:55:28 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x25000000}, 0x0) [ 2302.134247][T10402] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2302.141868][T10402] IPv6: NLM_F_CREATE should be set when creating new route 01:55:28 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local={0xac, 0x7}}, 0x10) 01:55:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x2c, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x2c}}, 0x0) [ 2302.337368][T10406] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2302.353245][T10405] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2302.397248][T10409] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xfc00}, 0x0) 01:55:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x3000000}, 0x0) 01:55:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x3f000000}, 0x0) 01:55:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local={0xac, 0x2}}, 0x10) [ 2302.642938][T10414] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2302.712608][T10416] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x2c, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x2c}}, 0x0) [ 2302.826354][T10419] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2302.844216][ T1211] ieee802154 phy0 wpan0: encryption failed: -22 [ 2302.851085][ T1211] ieee802154 phy1 wpan1: encryption failed: -22 01:55:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xff00}, 0x0) 01:55:29 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local={0xac, 0x9}}, 0x10) [ 2302.892665][T10421] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000000}, 0x0) 01:55:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x4000000}, 0x0) [ 2303.085613][T10426] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2303.125529][T10425] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local={0xac, 0x3}}, 0x10) 01:55:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x34000}, 0x0) 01:55:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x0, {0x0, 0x0, 0x10, 0x0, 0xae}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:55:29 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local={0xac, 0xa}}, 0x10) [ 2303.357097][T10430] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2303.367208][T10432] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c000000}, 0x0) 01:55:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x5000000}, 0x0) [ 2303.525217][T10435] validate_nla: 12 callbacks suppressed [ 2303.525282][T10435] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2303.544120][T10435] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2303.652113][T10441] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2303.715241][T10444] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local={0xac, 0x7}}, 0x10) 01:55:30 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local={0xac, 0xc}}, 0x10) 01:55:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x0, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:55:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x400300}, 0x0) [ 2303.848388][T10445] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2303.857366][T10445] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:30 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x60000000}, 0x0) 01:55:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x6000000}, 0x0) [ 2304.055628][T10450] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2304.112948][T10454] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2304.123427][T10454] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:30 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local={0xac, 0x1c}}, 0x10) [ 2304.192880][T10455] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2304.285184][T10457] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2304.293686][T10457] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:30 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x65580000}, 0x0) 01:55:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local={0xac, 0x9}}, 0x10) 01:55:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xe0ffff}, 0x0) 01:55:31 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x8, 0x4e22, @local}, 0x10) 01:55:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x7000000}, 0x0) [ 2304.626328][T10463] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2304.635315][T10463] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2304.651771][T10464] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:31 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local={0xac, 0x48}}, 0x10) 01:55:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local={0xac, 0xa}}, 0x10) [ 2304.791085][T10469] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2304.800143][T10469] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:31 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x68000000}, 0x0) 01:55:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x1000000}, 0x0) 01:55:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x0, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) (fail_nth: 1) 01:55:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x8000000}, 0x0) [ 2305.077199][T10476] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2305.086926][T10476] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2305.124139][T10477] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:31 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local={0xac, 0x64}}, 0x10) [ 2305.220228][T10479] FAULT_INJECTION: forcing a failure. [ 2305.220228][T10479] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2305.233831][T10479] CPU: 0 PID: 10479 Comm: syz-executor.5 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 2305.244513][T10479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2305.254794][T10479] Call Trace: [ 2305.258230][T10479] [ 2305.261317][T10479] dump_stack_lvl+0x1bf/0x240 [ 2305.266244][T10479] dump_stack+0x1e/0x20 [ 2305.270623][T10479] should_fail_ex+0x748/0x7f0 [ 2305.275597][T10479] should_fail+0x2a/0x30 [ 2305.280114][T10479] should_fail_usercopy+0x2e/0x40 [ 2305.285433][T10479] _copy_from_user+0x33/0x160 [ 2305.290394][T10479] ___sys_sendmsg+0x120/0x3c0 [ 2305.295349][T10479] ? __rcu_read_unlock+0x7a/0xd0 [ 2305.300558][T10479] ? __fget_files+0x580/0x640 [ 2305.305486][T10479] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2305.311575][T10479] __x64_sys_sendmsg+0x307/0x490 [ 2305.316791][T10479] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 2305.323325][T10479] do_syscall_64+0x44/0x110 [ 2305.328062][T10479] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2305.334205][T10479] RIP: 0033:0x7fc7bfa7cae9 [ 2305.338831][T10479] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2305.358698][T10479] RSP: 002b:00007fc7c074e0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2305.367377][T10479] RAX: ffffffffffffffda RBX: 00007fc7bfb9bf80 RCX: 00007fc7bfa7cae9 [ 2305.375561][T10479] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2305.383744][T10479] RBP: 00007fc7c074e120 R08: 0000000000000000 R09: 0000000000000000 [ 2305.391923][T10479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2305.400096][T10479] R13: 000000000000000b R14: 00007fc7bfb9bf80 R15: 00007fc7bfcbfa48 [ 2305.408294][T10479] [ 2305.448790][T10481] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2305.458017][T10481] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:31 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x6c000000}, 0x0) 01:55:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local={0xac, 0xc}}, 0x10) 01:55:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x2000000}, 0x0) 01:55:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x0, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) (fail_nth: 2) [ 2305.703499][T10484] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x9000000}, 0x0) 01:55:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local={0xac, 0x1c}}, 0x10) [ 2305.862262][T10491] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2305.872076][T10491] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2305.920059][T10493] FAULT_INJECTION: forcing a failure. [ 2305.920059][T10493] name failslab, interval 1, probability 0, space 0, times 0 [ 2305.933219][T10493] CPU: 0 PID: 10493 Comm: syz-executor.5 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 2305.943914][T10493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2305.954197][T10493] Call Trace: [ 2305.957664][T10493] [ 2305.960764][T10493] dump_stack_lvl+0x1bf/0x240 [ 2305.965708][T10493] dump_stack+0x1e/0x20 [ 2305.970094][T10493] should_fail_ex+0x748/0x7f0 [ 2305.975059][T10493] __should_failslab+0x188/0x1f0 [ 2305.980289][T10493] should_failslab+0x2d/0x70 [ 2305.985117][T10493] kmem_cache_alloc_node+0xe7/0xb10 [ 2305.990568][T10493] ? __alloc_skb+0x1e5/0x740 [ 2305.995420][T10493] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 2306.001962][T10493] __alloc_skb+0x1e5/0x740 [ 2306.006644][T10493] netlink_sendmsg+0xb34/0x13d0 [ 2306.011774][T10493] ? netlink_getsockopt+0x980/0x980 [ 2306.017316][T10493] ____sys_sendmsg+0x9c2/0xd60 [ 2306.022360][T10493] ___sys_sendmsg+0x28d/0x3c0 [ 2306.027316][T10493] ? __fget_files+0x580/0x640 [ 2306.032240][T10493] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2306.038330][T10493] __x64_sys_sendmsg+0x307/0x490 [ 2306.043555][T10493] do_syscall_64+0x44/0x110 [ 2306.048298][T10493] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2306.054444][T10493] RIP: 0033:0x7fc7bfa7cae9 [ 2306.059057][T10493] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2306.078918][T10493] RSP: 002b:00007fc7c072d0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2306.087597][T10493] RAX: ffffffffffffffda RBX: 00007fc7bfb9c050 RCX: 00007fc7bfa7cae9 [ 2306.095800][T10493] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2306.104058][T10493] RBP: 00007fc7c072d120 R08: 0000000000000000 R09: 0000000000000000 [ 2306.112230][T10493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2306.120404][T10493] R13: 000000000000006e R14: 00007fc7bfb9c050 R15: 00007fc7bfcbfa48 [ 2306.128604][T10493] 01:55:32 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local={0xac, 0x14, 0x2}}, 0x10) 01:55:32 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x74000000}, 0x0) 01:55:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x3000000}, 0x0) [ 2306.221781][T10495] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2306.230470][T10495] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xa000000}, 0x0) 01:55:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x0, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) (fail_nth: 3) [ 2306.447057][T10501] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2306.520265][T10504] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:33 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local={0xac, 0x48}}, 0x10) 01:55:33 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x74210000}, 0x0) [ 2306.659805][T10506] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:33 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local={0xac, 0x14, 0x3}}, 0x10) 01:55:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x4000000}, 0x0) 01:55:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x0, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) (fail_nth: 4) [ 2306.894879][T10512] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xb000000}, 0x0) [ 2306.938178][T10513] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:33 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local={0xac, 0x64}}, 0x10) 01:55:33 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x7a000000}, 0x0) 01:55:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x5000000}, 0x0) 01:55:33 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local={0xac, 0x14, 0x7}}, 0x10) [ 2307.202835][T10519] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2307.273297][T10521] FAULT_INJECTION: forcing a failure. [ 2307.273297][T10521] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2307.288532][T10521] CPU: 0 PID: 10521 Comm: syz-executor.5 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 2307.299240][T10521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2307.309518][T10521] Call Trace: [ 2307.312970][T10521] [ 2307.316075][T10521] dump_stack_lvl+0x1bf/0x240 [ 2307.321037][T10521] dump_stack+0x1e/0x20 [ 2307.325446][T10521] should_fail_ex+0x748/0x7f0 [ 2307.330448][T10521] should_fail+0x2a/0x30 [ 2307.334979][T10521] should_fail_usercopy+0x2e/0x40 [ 2307.340333][T10521] _copy_from_iter+0x211/0x25a0 [ 2307.345432][T10521] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2307.351571][T10521] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2307.357695][T10521] ? skb_put+0x189/0x230 [ 2307.362240][T10521] netlink_sendmsg+0xe9e/0x13d0 [ 2307.367395][T10521] ? netlink_getsockopt+0x980/0x980 [ 2307.372878][T10521] ____sys_sendmsg+0x9c2/0xd60 [ 2307.377963][T10521] ___sys_sendmsg+0x28d/0x3c0 [ 2307.382947][T10521] ? __fget_files+0x580/0x640 [ 2307.386932][T10526] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2307.387815][T10521] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2307.388004][T10521] __x64_sys_sendmsg+0x307/0x490 [ 2307.406475][T10521] do_syscall_64+0x44/0x110 [ 2307.411311][T10521] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2307.417485][T10521] RIP: 0033:0x7fc7bfa7cae9 01:55:33 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local={0xac, 0x14, 0x2}}, 0x10) [ 2307.422125][T10521] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2307.442025][T10521] RSP: 002b:00007fc7c074e0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2307.450741][T10521] RAX: ffffffffffffffda RBX: 00007fc7bfb9bf80 RCX: 00007fc7bfa7cae9 [ 2307.458968][T10521] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2307.467203][T10521] RBP: 00007fc7c074e120 R08: 0000000000000000 R09: 0000000000000000 [ 2307.475404][T10521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2307.483613][T10521] R13: 000000000000000b R14: 00007fc7bfb9bf80 R15: 00007fc7bfcbfa48 [ 2307.491936][T10521] [ 2307.525576][T10528] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xc000000}, 0x0) 01:55:34 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local={0xac, 0x14, 0x9}}, 0x10) 01:55:34 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x81000000}, 0x0) 01:55:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x6000000}, 0x0) 01:55:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x0, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) (fail_nth: 5) [ 2307.741906][T10531] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local={0xac, 0x14, 0x3}}, 0x10) 01:55:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xd000000}, 0x0) [ 2307.970713][T10538] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2307.993368][T10539] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2308.030397][T10540] FAULT_INJECTION: forcing a failure. [ 2308.030397][T10540] name failslab, interval 1, probability 0, space 0, times 0 [ 2308.047909][T10540] CPU: 1 PID: 10540 Comm: syz-executor.5 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 2308.058615][T10540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2308.068916][T10540] Call Trace: [ 2308.072355][T10540] [ 2308.075441][T10540] dump_stack_lvl+0x1bf/0x240 [ 2308.080371][T10540] dump_stack+0x1e/0x20 [ 2308.084749][T10540] should_fail_ex+0x748/0x7f0 [ 2308.089718][T10540] __should_failslab+0x188/0x1f0 [ 2308.094926][T10540] should_failslab+0x2d/0x70 [ 2308.099776][T10540] kmem_cache_alloc+0xe6/0xa90 [ 2308.104772][T10540] ? ref_tracker_alloc+0x43d/0x700 [ 2308.110143][T10540] ? skb_clone+0x303/0x540 [ 2308.114833][T10540] skb_clone+0x303/0x540 [ 2308.119359][T10540] __netlink_deliver_tap+0x60a/0xc90 [ 2308.124918][T10540] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2308.131025][T10540] netlink_unicast+0x10f1/0x1250 [ 2308.136253][T10540] netlink_sendmsg+0x1238/0x13d0 [ 2308.141486][T10540] ? netlink_getsockopt+0x980/0x980 [ 2308.147032][T10540] ____sys_sendmsg+0x9c2/0xd60 [ 2308.152092][T10540] ___sys_sendmsg+0x28d/0x3c0 [ 2308.157052][T10540] ? __fget_files+0x580/0x640 [ 2308.161982][T10540] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2308.168085][T10540] __x64_sys_sendmsg+0x307/0x490 [ 2308.173314][T10540] do_syscall_64+0x44/0x110 [ 2308.178048][T10540] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2308.184194][T10540] RIP: 0033:0x7fc7bfa7cae9 [ 2308.188813][T10540] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2308.208684][T10540] RSP: 002b:00007fc7c074e0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2308.217446][T10540] RAX: ffffffffffffffda RBX: 00007fc7bfb9bf80 RCX: 00007fc7bfa7cae9 [ 2308.225643][T10540] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2308.233821][T10540] RBP: 00007fc7c074e120 R08: 0000000000000000 R09: 0000000000000000 [ 2308.241998][T10540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2308.250185][T10540] R13: 000000000000000b R14: 00007fc7bfb9bf80 R15: 00007fc7bfcbfa48 [ 2308.258386][T10540] [ 2308.261749][ C1] vkms_vblank_simulate: vblank timer overrun [ 2308.271136][T10540] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 01:55:34 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local={0xac, 0x14, 0xa}}, 0x10) 01:55:34 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x820d0000}, 0x0) 01:55:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x7000000}, 0x0) 01:55:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x0, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) (fail_nth: 6) [ 2308.625630][T10545] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2308.717245][T10550] validate_nla: 7 callbacks suppressed [ 2308.717312][T10550] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2308.732068][T10550] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:35 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local={0xac, 0x14, 0xc}}, 0x10) 01:55:35 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x88470000}, 0x0) [ 2308.764574][T10547] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2308.773080][T10547] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local={0xac, 0x14, 0x7}}, 0x10) 01:55:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x8000000}, 0x0) [ 2308.933180][T10552] FAULT_INJECTION: forcing a failure. [ 2308.933180][T10552] name failslab, interval 1, probability 0, space 0, times 0 [ 2308.946394][T10552] CPU: 1 PID: 10552 Comm: syz-executor.5 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 2308.957089][T10552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2308.967355][T10552] Call Trace: [ 2308.970796][T10552] [ 2308.973881][T10552] dump_stack_lvl+0x1bf/0x240 [ 2308.978819][T10552] dump_stack+0x1e/0x20 [ 2308.983198][T10552] should_fail_ex+0x748/0x7f0 [ 2308.988168][T10552] __should_failslab+0x188/0x1f0 [ 2308.993382][T10552] should_failslab+0x2d/0x70 [ 2308.998213][T10552] __kmem_cache_alloc_node+0xc6/0x970 [ 2309.003826][T10552] ? fib6_info_alloc+0x4d/0x1b0 [ 2309.008950][T10552] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2309.015038][T10552] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2309.021130][T10552] __kmalloc+0x121/0x3c0 [ 2309.025599][T10552] ? fib6_info_alloc+0x4d/0x1b0 [ 2309.030721][T10552] fib6_info_alloc+0x4d/0x1b0 [ 2309.035661][T10552] ? ip6_route_info_create+0x610/0x1fb0 [ 2309.041462][T10552] ip6_route_info_create+0x83e/0x1fb0 [ 2309.047118][T10552] ip6_route_add+0x48/0x300 [ 2309.051872][T10552] inet6_rtm_newroute+0x1b3e/0x36a0 [ 2309.057335][T10552] ? __kfree_skb+0x1f8/0x250 [ 2309.062200][T10552] ? consume_skb+0xa8/0x2d0 [ 2309.066957][T10552] ? nlmon_xmit+0x9c/0xe0 [ 2309.071513][T10552] ? dev_hard_start_xmit+0x247/0xa10 [ 2309.077084][T10552] ? __dev_queue_xmit+0x33b8/0x5130 [ 2309.082529][T10552] ? __netlink_deliver_tap+0x84f/0xc90 [ 2309.088249][T10552] ? netlink_unicast+0x10f1/0x1250 [ 2309.093610][T10552] ? netlink_sendmsg+0x1238/0x13d0 [ 2309.098986][T10552] ? ____sys_sendmsg+0x9c2/0xd60 [ 2309.104184][T10552] ? ___sys_sendmsg+0x28d/0x3c0 [ 2309.109295][T10552] ? __x64_sys_sendmsg+0x307/0x490 [ 2309.114675][T10552] ? do_syscall_64+0x44/0x110 [ 2309.119585][T10552] ? entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2309.125913][T10552] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 2309.132464][T10552] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2309.138567][T10552] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2309.144656][T10552] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 2309.151184][T10552] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2309.157280][T10552] ? ipv6_route_sysctl_table_size+0x90/0x90 [ 2309.163465][T10552] rtnetlink_rcv_msg+0x16a6/0x1840 [ 2309.168878][T10552] ? ref_tracker_free+0x45/0xc10 [ 2309.174065][T10552] ? filter_irq_stacks+0x60/0x1a0 [ 2309.179352][T10552] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2309.185451][T10552] ? filter_irq_stacks+0x164/0x1a0 [ 2309.190834][T10552] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2309.196926][T10552] netlink_rcv_skb+0x371/0x650 [ 2309.201966][T10552] ? rtnetlink_bind+0xf0/0xf0 [ 2309.206916][T10552] ? rtnetlink_net_exit+0x60/0x60 [ 2309.212201][T10552] rtnetlink_rcv+0x34/0x40 [ 2309.216872][T10552] netlink_unicast+0xf47/0x1250 [ 2309.222007][T10552] netlink_sendmsg+0x1238/0x13d0 [ 2309.227221][T10552] ? netlink_getsockopt+0x980/0x980 [ 2309.232697][T10552] ____sys_sendmsg+0x9c2/0xd60 [ 2309.237756][T10552] ___sys_sendmsg+0x28d/0x3c0 [ 2309.242710][T10552] ? __fget_files+0x580/0x640 [ 2309.247631][T10552] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2309.253720][T10552] __x64_sys_sendmsg+0x307/0x490 [ 2309.258952][T10552] do_syscall_64+0x44/0x110 [ 2309.263693][T10552] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2309.269854][T10552] RIP: 0033:0x7fc7bfa7cae9 [ 2309.274477][T10552] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2309.294345][T10552] RSP: 002b:00007fc7c074e0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2309.303026][T10552] RAX: ffffffffffffffda RBX: 00007fc7bfb9bf80 RCX: 00007fc7bfa7cae9 [ 2309.311213][T10552] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2309.320187][T10552] RBP: 00007fc7c074e120 R08: 0000000000000000 R09: 0000000000000000 [ 2309.328402][T10552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2309.336587][T10552] R13: 000000000000000b R14: 00007fc7bfb9bf80 R15: 00007fc7bfcbfa48 [ 2309.344807][T10552] [ 2309.348179][ C1] vkms_vblank_simulate: vblank timer overrun [ 2309.373128][T10554] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local={0xac, 0x14, 0x9}}, 0x10) 01:55:35 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x88480000}, 0x0) 01:55:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xe000000}, 0x0) 01:55:36 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local={0xac, 0x14, 0x1c}}, 0x10) 01:55:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x0, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) (fail_nth: 7) [ 2309.726224][T10564] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2309.734834][T10564] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2309.761806][T10565] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2309.812129][T10563] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2309.820685][T10563] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:36 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x88a8ffff}, 0x0) 01:55:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local={0xac, 0x14, 0xa}}, 0x10) [ 2310.001927][T10570] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2310.012156][T10570] FAULT_INJECTION: forcing a failure. [ 2310.012156][T10570] name failslab, interval 1, probability 0, space 0, times 0 [ 2310.025234][T10570] CPU: 0 PID: 10570 Comm: syz-executor.5 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 2310.035937][T10570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2310.046210][T10570] Call Trace: [ 2310.049660][T10570] [ 2310.052752][T10570] dump_stack_lvl+0x1bf/0x240 [ 2310.057715][T10570] dump_stack+0x1e/0x20 [ 2310.062097][T10570] should_fail_ex+0x748/0x7f0 [ 2310.067074][T10570] __should_failslab+0x188/0x1f0 [ 2310.072288][T10570] should_failslab+0x2d/0x70 [ 2310.077209][T10570] kmem_cache_alloc_node+0xe7/0xb10 [ 2310.082659][T10570] ? __alloc_skb+0x1e5/0x740 [ 2310.087523][T10570] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 2310.094086][T10570] __alloc_skb+0x1e5/0x740 [ 2310.098794][T10570] netlink_ack+0x5c1/0x1a70 [ 2310.103612][T10570] netlink_rcv_skb+0x50a/0x650 [ 2310.108654][T10570] ? rtnetlink_bind+0xf0/0xf0 [ 2310.113602][T10570] ? rtnetlink_net_exit+0x60/0x60 [ 2310.118880][T10570] rtnetlink_rcv+0x34/0x40 [ 2310.123553][T10570] netlink_unicast+0xf47/0x1250 [ 2310.128678][T10570] netlink_sendmsg+0x1238/0x13d0 [ 2310.133893][T10570] ? netlink_getsockopt+0x980/0x980 [ 2310.139347][T10570] ____sys_sendmsg+0x9c2/0xd60 [ 2310.144415][T10570] ___sys_sendmsg+0x28d/0x3c0 [ 2310.149375][T10570] ? __fget_files+0x580/0x640 [ 2310.154316][T10570] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2310.160418][T10570] __x64_sys_sendmsg+0x307/0x490 [ 2310.165652][T10570] do_syscall_64+0x44/0x110 [ 2310.170396][T10570] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2310.176547][T10570] RIP: 0033:0x7fc7bfa7cae9 [ 2310.181162][T10570] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2310.201034][T10570] RSP: 002b:00007fc7c074e0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2310.209720][T10570] RAX: ffffffffffffffda RBX: 00007fc7bfb9bf80 RCX: 00007fc7bfa7cae9 [ 2310.217916][T10570] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2310.226102][T10570] RBP: 00007fc7c074e120 R08: 0000000000000000 R09: 0000000000000000 [ 2310.234447][T10570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2310.242621][T10570] R13: 000000000000000b R14: 00007fc7bfb9bf80 R15: 00007fc7bfcbfa48 [ 2310.250823][T10570] 01:55:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xf000000}, 0x0) 01:55:36 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local={0xac, 0x14, 0x48}}, 0x10) [ 2310.324974][T10572] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x9000000}, 0x0) 01:55:36 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0xe0ffffff}, 0x0) [ 2310.519103][T10574] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2310.527921][T10574] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2310.586547][T10578] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2310.626368][T10582] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 01:55:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x0, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) (fail_nth: 8) [ 2310.634962][T10582] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x10000000}, 0x0) 01:55:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local={0xac, 0x14, 0xc}}, 0x10) 01:55:37 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local={0xac, 0x14, 0x64}}, 0x10) 01:55:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) 01:55:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xa000000}, 0x0) [ 2310.915351][T10584] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2310.992540][T10588] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2311.001842][T10588] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2311.023818][T10591] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x0, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) (fail_nth: 9) 01:55:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x11000000}, 0x0) 01:55:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0xfc000000}, 0x0) 01:55:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local={0xac, 0x14, 0x1c}}, 0x10) 01:55:37 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0x64}}, 0x10) [ 2311.289051][T10594] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2311.297802][T10594] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2311.358707][T10596] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2311.371096][T10596] FAULT_INJECTION: forcing a failure. [ 2311.371096][T10596] name failslab, interval 1, probability 0, space 0, times 0 [ 2311.384634][T10596] CPU: 1 PID: 10596 Comm: syz-executor.5 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 2311.395352][T10596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2311.405640][T10596] Call Trace: [ 2311.408233][T10598] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2311.409012][T10596] [ 2311.409060][T10596] dump_stack_lvl+0x1bf/0x240 [ 2311.424747][T10598] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2311.424949][T10596] dump_stack+0x1e/0x20 [ 2311.436733][T10596] should_fail_ex+0x748/0x7f0 [ 2311.441750][T10596] __should_failslab+0x188/0x1f0 [ 2311.446990][T10596] should_failslab+0x2d/0x70 [ 2311.451837][T10596] kmem_cache_alloc+0xe6/0xa90 01:55:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xb000000}, 0x0) [ 2311.456859][T10596] ? ref_tracker_alloc+0x43d/0x700 [ 2311.462240][T10596] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2311.468352][T10596] ? skb_clone+0x303/0x540 [ 2311.473047][T10596] ? __netlink_lookup+0x44/0x7a0 [ 2311.478291][T10596] skb_clone+0x303/0x540 [ 2311.482822][T10596] __netlink_deliver_tap+0x60a/0xc90 [ 2311.488405][T10596] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2311.494532][T10596] netlink_sendskb+0x232/0x260 [ 2311.499688][T10596] netlink_unicast+0x70e/0x1250 [ 2311.504851][T10596] netlink_ack+0x1951/0x1a70 [ 2311.509761][T10596] netlink_rcv_skb+0x50a/0x650 [ 2311.514854][T10596] ? rtnetlink_bind+0xf0/0xf0 [ 2311.519834][T10596] ? rtnetlink_net_exit+0x60/0x60 [ 2311.525140][T10596] rtnetlink_rcv+0x34/0x40 [ 2311.529928][T10596] netlink_unicast+0xf47/0x1250 [ 2311.535087][T10596] netlink_sendmsg+0x1238/0x13d0 [ 2311.540331][T10596] ? netlink_getsockopt+0x980/0x980 [ 2311.545819][T10596] ____sys_sendmsg+0x9c2/0xd60 [ 2311.550916][T10596] ___sys_sendmsg+0x28d/0x3c0 [ 2311.555913][T10596] ? __fget_files+0x580/0x640 [ 2311.560961][T10596] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2311.567093][T10596] __x64_sys_sendmsg+0x307/0x490 [ 2311.572470][T10596] do_syscall_64+0x44/0x110 [ 2311.577247][T10596] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2311.583414][T10596] RIP: 0033:0x7fc7bfa7cae9 [ 2311.588036][T10596] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2311.608017][T10596] RSP: 002b:00007fc7c074e0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2311.616709][T10596] RAX: ffffffffffffffda RBX: 00007fc7bfb9bf80 RCX: 00007fc7bfa7cae9 [ 2311.624912][T10596] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2311.633090][T10596] RBP: 00007fc7c074e120 R08: 0000000000000000 R09: 0000000000000000 [ 2311.641277][T10596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2311.649478][T10596] R13: 000000000000000b R14: 00007fc7bfb9bf80 R15: 00007fc7bfcbfa48 [ 2311.657698][T10596] [ 2311.661091][ C1] vkms_vblank_simulate: vblank timer overrun 01:55:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x12000000}, 0x0) [ 2311.827981][T10600] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2311.844695][T10605] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2311.853472][T10605] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x25000000}, 0x0) [ 2311.919270][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. 01:55:38 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local={0xac, 0x14, 0x48}}, 0x10) 01:55:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0xfdffffff}, 0x0) 01:55:38 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x2) [ 2312.092764][T10609] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x0, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) (fail_nth: 10) [ 2312.138081][T10610] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xc000000}, 0x0) 01:55:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x39240000}, 0x0) [ 2312.316580][T10616] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:38 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local={0xac, 0x14, 0x64}}, 0x10) 01:55:38 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x3) [ 2312.471406][T10620] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2312.484735][T10618] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 01:55:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xd000000}, 0x0) [ 2312.533641][T10618] FAULT_INJECTION: forcing a failure. [ 2312.533641][T10618] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2312.551246][T10618] CPU: 1 PID: 10618 Comm: syz-executor.5 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 2312.561966][T10618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2312.572254][T10618] Call Trace: [ 2312.575709][T10618] [ 2312.578828][T10618] dump_stack_lvl+0x1bf/0x240 [ 2312.583796][T10618] dump_stack+0x1e/0x20 [ 2312.588198][T10618] should_fail_ex+0x748/0x7f0 [ 2312.593187][T10618] should_fail+0x2a/0x30 [ 2312.597721][T10618] should_fail_usercopy+0x2e/0x40 [ 2312.603050][T10618] _copy_to_user+0x33/0x100 [ 2312.607833][T10618] simple_read_from_buffer+0x199/0x340 [ 2312.613558][T10618] proc_fail_nth_read+0x1e8/0x2c0 [ 2312.618862][T10618] ? proc_fault_inject_write+0x490/0x490 [ 2312.624770][T10618] vfs_read+0x367/0xe00 [ 2312.629200][T10618] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 2312.635740][T10618] ksys_read+0x20f/0x4c0 [ 2312.640280][T10618] __x64_sys_read+0x93/0xd0 [ 2312.645031][T10618] do_syscall_64+0x44/0x110 [ 2312.649791][T10618] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2312.655944][T10618] RIP: 0033:0x7fc7bfa7b78c [ 2312.660566][T10618] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 59 81 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 af 81 02 00 48 [ 2312.680435][T10618] RSP: 002b:00007fc7c074e0c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2312.689119][T10618] RAX: ffffffffffffffda RBX: 00007fc7bfb9bf80 RCX: 00007fc7bfa7b78c [ 2312.697317][T10618] RDX: 000000000000000f RSI: 00007fc7c074e130 RDI: 0000000000000005 [ 2312.705490][T10618] RBP: 00007fc7c074e120 R08: 0000000000000000 R09: 0000000000000000 [ 2312.713665][T10618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2312.721834][T10618] R13: 000000000000000b R14: 00007fc7bfb9bf80 R15: 00007fc7bfcbfa48 [ 2312.730034][T10618] 01:55:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0xfe80ffff}, 0x0) [ 2312.733407][ C1] vkms_vblank_simulate: vblank timer overrun [ 2312.825321][T10622] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2312.931605][T10629] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0xfec0ffff}, 0x0) 01:55:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x3b240000}, 0x0) [ 2313.061847][T10631] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0xff000000}, 0x0) [ 2313.157598][T10632] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:39 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0xa) 01:55:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0x64}}, 0x10) [ 2313.280161][T10634] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2313.381767][T10637] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x0, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:55:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xe000000}, 0x0) 01:55:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0xff600000}, 0x0) 01:55:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x3f000000}, 0x0) 01:55:40 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x14) [ 2313.707871][T10645] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2313.739213][T10646] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2313.748318][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2313.781712][T10647] validate_nla: 7 callbacks suppressed [ 2313.781777][T10647] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2313.796039][T10647] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0xffff0000}, 0x0) 01:55:40 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x29) 01:55:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xf000000}, 0x0) [ 2313.894475][T10650] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 01:55:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x48000000}, 0x0) 01:55:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x0, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2314.137592][T10654] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2314.203293][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2314.248134][T10657] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2314.256714][T10657] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2314.302865][T10658] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2314.312336][T10658] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0xffff80fe}, 0x0) [ 2314.349094][T10660] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 01:55:40 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0xf8) 01:55:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x2) 01:55:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x4c000000}, 0x0) 01:55:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x0, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:55:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x10000000}, 0x0) [ 2314.574389][T10662] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:41 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0xffffa888}, 0x0) [ 2314.787736][T10672] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2314.803936][T10672] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2314.818233][T10668] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2314.826739][T10668] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2314.838704][T10669] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 01:55:41 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0xff0f) 01:55:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0xa) 01:55:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x11000000}, 0x0) [ 2315.033121][T10674] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x4d100000}, 0x0) 01:55:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x0, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:55:41 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0xffffc0fe}, 0x0) [ 2315.347034][T10681] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2315.355635][T10681] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:41 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x0, 0x0) sync_file_range(r1, 0x0, 0x0, 0x1) getsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000200), &(0x7f0000000240)=0x4) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x7800, 0x701, 0x8, 0x3, {{0x39, 0x4, 0x2, 0x2, 0xe4, 0x66, 0x0, 0x9, 0x4, 0x0, @broadcast, @remote, {[@noop, @cipso={0x86, 0x14, 0x3, [{0x5, 0xe, "140b7b6605773d2403d46c92"}]}, @noop, @cipso={0x86, 0x6b, 0x3, [{0x2, 0x11, "1fee55e3ae47b4365a2b35e18acb16"}, {0x0, 0xc, "44020d2c77b353657173"}, {0x0, 0x11, "a43183aed1f6b7a6d32518effbcc5d"}, {0x7, 0x10, "788cc2fbb38d5ba55d7e2a254ee4"}, {0x6, 0x10, "e8bb9a4e188d3b396a4081accc49"}, {0x0, 0xd, "421ff4fc39e003fba0d8d2"}, {0x5, 0xa, "e37db424a3190c95"}]}, @timestamp_prespec={0x44, 0x34, 0x8d, 0x3, 0x2, [{@rand_addr=0x64010102, 0x2}, {@multicast2, 0x3}, {@local, 0xffff0dd1}, {@local, 0x800}, {@local, 0x8086}, {@dev={0xac, 0x14, 0x14, 0x28}, 0xffff}]}, @ra={0x94, 0x4}, @generic={0x86, 0xe, "1420182350440a0400003fd4"}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}]}}}}}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r6}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x0, 0x0) sync_file_range(r8, 0x0, 0x0, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x1d, 0xa, &(0x7f00000002c0)=@raw=[@ldst={0x3, 0x2, 0x6, 0x7, 0x5, 0xfffffffffffffff4, 0x4}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}], &(0x7f0000000340)='GPL\x00', 0x1f, 0xf3, &(0x7f0000000380)=""/243, 0x41000, 0x21, '\x00', r6, 0x1b, r8, 0x8, &(0x7f0000000480)={0x7, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0)=[r1, r1], 0x0, 0x10, 0xf95}, 0x90) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000001c0)={@mcast2, 0x72, r3}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x0, 0x0) sync_file_range(r9, 0x0, 0x0, 0x1) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000005c0)=r9, 0x4) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r9, 0xc10c5541, &(0x7f0000000600)={0x5, 0xac63}) 01:55:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x14) [ 2315.431026][T10683] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2315.439835][T10683] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2315.473626][T10684] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2315.484654][T10686] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x12000000}, 0x0) 01:55:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x60000000}, 0x0) 01:55:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) 01:55:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x0, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2315.718774][T10689] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2315.727389][T10689] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2315.775497][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2315.824067][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2315.824525][T10692] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2315.844010][T10692] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2315.977804][T10697] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2315.987090][T10697] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2316.014293][T10699] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 01:55:42 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x0, 0x0) sync_file_range(r1, 0x0, 0x0, 0x1) (async, rerun: 32) getsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000200), &(0x7f0000000240)=0x4) (rerun: 32) close(r0) (async, rerun: 32) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x7800, 0x701, 0x8, 0x3, {{0x39, 0x4, 0x2, 0x2, 0xe4, 0x66, 0x0, 0x9, 0x4, 0x0, @broadcast, @remote, {[@noop, @cipso={0x86, 0x14, 0x3, [{0x5, 0xe, "140b7b6605773d2403d46c92"}]}, @noop, @cipso={0x86, 0x6b, 0x3, [{0x2, 0x11, "1fee55e3ae47b4365a2b35e18acb16"}, {0x0, 0xc, "44020d2c77b353657173"}, {0x0, 0x11, "a43183aed1f6b7a6d32518effbcc5d"}, {0x7, 0x10, "788cc2fbb38d5ba55d7e2a254ee4"}, {0x6, 0x10, "e8bb9a4e188d3b396a4081accc49"}, {0x0, 0xd, "421ff4fc39e003fba0d8d2"}, {0x5, 0xa, "e37db424a3190c95"}]}, @timestamp_prespec={0x44, 0x34, 0x8d, 0x3, 0x2, [{@rand_addr=0x64010102, 0x2}, {@multicast2, 0x3}, {@local, 0xffff0dd1}, {@local, 0x800}, {@local, 0x8086}, {@dev={0xac, 0x14, 0x14, 0x28}, 0xffff}]}, @ra={0x94, 0x4}, @generic={0x86, 0xe, "1420182350440a0400003fd4"}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}]}}}}}) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) (rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r6}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x0, 0x0) sync_file_range(r8, 0x0, 0x0, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x1d, 0xa, &(0x7f00000002c0)=@raw=[@ldst={0x3, 0x2, 0x6, 0x7, 0x5, 0xfffffffffffffff4, 0x4}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}], &(0x7f0000000340)='GPL\x00', 0x1f, 0xf3, &(0x7f0000000380)=""/243, 0x41000, 0x21, '\x00', r6, 0x1b, r8, 0x8, &(0x7f0000000480)={0x7, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0)=[r1, r1], 0x0, 0x10, 0xf95}, 0x90) (async) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000001c0)={@mcast2, 0x72, r3}) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x0, 0x0) sync_file_range(r9, 0x0, 0x0, 0x1) (async) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000005c0)=r9, 0x4) (async) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r9, 0xc10c5541, &(0x7f0000000600)={0x5, 0xac63}) 01:55:42 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x29) [ 2316.052141][T10698] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x25000000}, 0x0) 01:55:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x0, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:55:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0xffffffe0}, 0x0) 01:55:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x65580000}, 0x0) [ 2316.389710][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. 01:55:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0xf8) [ 2316.535368][T10714] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2316.543352][T10715] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2316.590254][T10716] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x6, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x0, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:55:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x68000000}, 0x0) 01:55:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x3f000000}, 0x0) 01:55:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0) 01:55:43 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x0, 0x0) sync_file_range(r1, 0x0, 0x0, 0x1) getsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000200), &(0x7f0000000240)=0x4) (async) close(r0) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x7800, 0x701, 0x8, 0x3, {{0x39, 0x4, 0x2, 0x2, 0xe4, 0x66, 0x0, 0x9, 0x4, 0x0, @broadcast, @remote, {[@noop, @cipso={0x86, 0x14, 0x3, [{0x5, 0xe, "140b7b6605773d2403d46c92"}]}, @noop, @cipso={0x86, 0x6b, 0x3, [{0x2, 0x11, "1fee55e3ae47b4365a2b35e18acb16"}, {0x0, 0xc, "44020d2c77b353657173"}, {0x0, 0x11, "a43183aed1f6b7a6d32518effbcc5d"}, {0x7, 0x10, "788cc2fbb38d5ba55d7e2a254ee4"}, {0x6, 0x10, "e8bb9a4e188d3b396a4081accc49"}, {0x0, 0xd, "421ff4fc39e003fba0d8d2"}, {0x5, 0xa, "e37db424a3190c95"}]}, @timestamp_prespec={0x44, 0x34, 0x8d, 0x3, 0x2, [{@rand_addr=0x64010102, 0x2}, {@multicast2, 0x3}, {@local, 0xffff0dd1}, {@local, 0x800}, {@local, 0x8086}, {@dev={0xac, 0x14, 0x14, 0x28}, 0xffff}]}, @ra={0x94, 0x4}, @generic={0x86, 0xe, "1420182350440a0400003fd4"}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}]}}}}}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r6}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) (async) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x0, 0x0) sync_file_range(r8, 0x0, 0x0, 0x1) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x1d, 0xa, &(0x7f00000002c0)=@raw=[@ldst={0x3, 0x2, 0x6, 0x7, 0x5, 0xfffffffffffffff4, 0x4}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}], &(0x7f0000000340)='GPL\x00', 0x1f, 0xf3, &(0x7f0000000380)=""/243, 0x41000, 0x21, '\x00', r6, 0x1b, r8, 0x8, &(0x7f0000000480)={0x7, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0)=[r1, r1], 0x0, 0x10, 0xf95}, 0x90) (async) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000001c0)={@mcast2, 0x72, r3}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) (async) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x0, 0x0) sync_file_range(r9, 0x0, 0x0, 0x1) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000005c0)=r9, 0x4) (async) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r9, 0xc10c5541, &(0x7f0000000600)={0x5, 0xac63}) [ 2316.937514][T10724] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2316.967751][T10722] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0xff0f) [ 2316.997385][T10726] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2317.026874][T10728] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x0, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:55:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x48000000}, 0x0) 01:55:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x6c000000}, 0x0) 01:55:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0xfffffffd}, 0x0) 01:55:43 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000040)={0x3, 0x0, [{0x6, 0x3, 0x0, 0x0, @sint={0x40, 0x18}}, {0x5d5a, 0x1, 0x0, 0x0, @irqchip={0xfffff801, 0x40}}, {0x9, 0x2, 0x0, 0x0, @msi={0x2, 0x1ff, 0x9018, 0x8}}]}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x0, 0x0) sync_file_range(r3, 0x0, 0x0, 0x1) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x6d0800, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r4, 0x4068aea3, &(0x7f0000000180)={0xa8, 0x0, 0x2}) setsockopt$inet6_tcp_int(r3, 0x6, 0x5, &(0x7f0000000100)=0xff, 0x4) 01:55:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x202082, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0884113, &(0x7f00000000c0)={0x0, 0x5, 0x2, 0x6, 0x8, 0x400000000000, 0x6, 0x2, 0x101, 0xf29e, 0x4, 0x4}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004440)={0x3c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x3c}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004440)={0x3c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r1, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xfc, r6, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IE={0x99, 0x2a, [@random_vendor={0xdd, 0x93, "f078a088ab75db352afe93af048ca6b84583040034df049f40e441274eba69f8acb5a44ef26b32a3f7c2f40b184b7200eab919518835df95ea57409a30a1ddf60960571dc878baedf00a1e512fd3d03566d7de1c9f03b3aaf135c4173eabce430e0e4b57535048fedfe933e9a44db5c376a5f8f1103edc8647901392f46aecf4fe174af48f8fa33a5c4ee83b7d2ea96c68dea8"}]}, @NL80211_ATTR_FILS_KEK={0x2e, 0xf2, "7ddd693305967baee66e135079286090fc525e5b3fa94affabf1a74f76aaa7c6d0ae36bc396cae58e921"}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x2}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4840}, 0x88c0) fcntl$lock(r3, 0x25, &(0x7f0000000040)={0x0, 0x3, 0x1, 0xb9, 0xffffffffffffffff}) listen(r2, 0x0) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) [ 2317.426298][T10736] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x4c000000}, 0x0) [ 2317.515581][T10740] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x0, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2317.618860][T10741] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x74000000}, 0x0) [ 2317.731428][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. 01:55:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0xffffffff}, 0x0) [ 2317.839092][T10748] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 01:55:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x202082, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0884113, &(0x7f00000000c0)={0x0, 0x5, 0x2, 0x6, 0x8, 0x400000000000, 0x6, 0x2, 0x101, 0xf29e, 0x4, 0x4}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004440)={0x3c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x3c}}, 0x0) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004440)={0x3c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r1, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xfc, r6, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IE={0x99, 0x2a, [@random_vendor={0xdd, 0x93, "f078a088ab75db352afe93af048ca6b84583040034df049f40e441274eba69f8acb5a44ef26b32a3f7c2f40b184b7200eab919518835df95ea57409a30a1ddf60960571dc878baedf00a1e512fd3d03566d7de1c9f03b3aaf135c4173eabce430e0e4b57535048fedfe933e9a44db5c376a5f8f1103edc8647901392f46aecf4fe174af48f8fa33a5c4ee83b7d2ea96c68dea8"}]}, @NL80211_ATTR_FILS_KEK={0x2e, 0xf2, "7ddd693305967baee66e135079286090fc525e5b3fa94affabf1a74f76aaa7c6d0ae36bc396cae58e921"}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x2}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4840}, 0x88c0) (async) fcntl$lock(r3, 0x25, &(0x7f0000000040)={0x0, 0x3, 0x1, 0xb9, 0xffffffffffffffff}) listen(r2, 0x0) (async, rerun: 32) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 32) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) [ 2317.891057][T10750] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x9, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x0, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2318.022944][T10752] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x52100000}, 0x0) 01:55:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000040)={0x3, 0x0, [{0x6, 0x3, 0x0, 0x0, @sint={0x40, 0x18}}, {0x5d5a, 0x1, 0x0, 0x0, @irqchip={0xfffff801, 0x40}}, {0x9, 0x2, 0x0, 0x0, @msi={0x2, 0x1ff, 0x9018, 0x8}}]}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x0, 0x0) sync_file_range(r3, 0x0, 0x0, 0x1) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x6d0800, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r4, 0x4068aea3, &(0x7f0000000180)={0xa8, 0x0, 0x2}) setsockopt$inet6_tcp_int(r3, 0x6, 0x5, &(0x7f0000000100)=0xff, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) (async) close(r0) (async) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000040)={0x3, 0x0, [{0x6, 0x3, 0x0, 0x0, @sint={0x40, 0x18}}, {0x5d5a, 0x1, 0x0, 0x0, @irqchip={0xfffff801, 0x40}}, {0x9, 0x2, 0x0, 0x0, @msi={0x2, 0x1ff, 0x9018, 0x8}}]}) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r1, 0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x0, 0x0) (async) sync_file_range(r3, 0x0, 0x0, 0x1) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x6d0800, 0x0) (async) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r4, 0x4068aea3, &(0x7f0000000180)={0xa8, 0x0, 0x2}) (async) setsockopt$inet6_tcp_int(r3, 0x6, 0x5, &(0x7f0000000100)=0xff, 0x4) (async) [ 2318.144796][T10755] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2318.223434][T10758] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 01:55:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}}, 0x2) 01:55:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x7a000000}, 0x0) [ 2318.329142][T10762] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x0, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:55:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x60000000}, 0x0) [ 2318.553141][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. 01:55:45 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x202082, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0884113, &(0x7f00000000c0)={0x0, 0x5, 0x2, 0x6, 0x8, 0x400000000000, 0x6, 0x2, 0x101, 0xf29e, 0x4, 0x4}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 64) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004440)={0x3c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x3c}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004440)={0x3c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x3c}}, 0x0) (async) sendmsg$NL80211_CMD_ASSOCIATE(r1, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xfc, r6, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IE={0x99, 0x2a, [@random_vendor={0xdd, 0x93, "f078a088ab75db352afe93af048ca6b84583040034df049f40e441274eba69f8acb5a44ef26b32a3f7c2f40b184b7200eab919518835df95ea57409a30a1ddf60960571dc878baedf00a1e512fd3d03566d7de1c9f03b3aaf135c4173eabce430e0e4b57535048fedfe933e9a44db5c376a5f8f1103edc8647901392f46aecf4fe174af48f8fa33a5c4ee83b7d2ea96c68dea8"}]}, @NL80211_ATTR_FILS_KEK={0x2e, 0xf2, "7ddd693305967baee66e135079286090fc525e5b3fa94affabf1a74f76aaa7c6d0ae36bc396cae58e921"}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x2}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4840}, 0x88c0) fcntl$lock(r3, 0x25, &(0x7f0000000040)={0x0, 0x3, 0x1, 0xb9, 0xffffffffffffffff}) listen(r2, 0x0) (async) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) [ 2318.603424][T10768] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2318.620287][T10769] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:45 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}}, 0x3) 01:55:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x81000000}, 0x0) [ 2318.840197][T10776] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2318.853568][T10777] validate_nla: 10 callbacks suppressed [ 2318.853637][T10777] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2318.868608][T10777] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:45 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) (async) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000040)={0x3, 0x0, [{0x6, 0x3, 0x0, 0x0, @sint={0x40, 0x18}}, {0x5d5a, 0x1, 0x0, 0x0, @irqchip={0xfffff801, 0x40}}, {0x9, 0x2, 0x0, 0x0, @msi={0x2, 0x1ff, 0x9018, 0x8}}]}) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x0, 0x0) sync_file_range(r3, 0x0, 0x0, 0x1) (async) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x6d0800, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r4, 0x4068aea3, &(0x7f0000000180)={0xa8, 0x0, 0x2}) setsockopt$inet6_tcp_int(r3, 0x6, 0x5, &(0x7f0000000100)=0xff, 0x4) 01:55:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x65580000}, 0x0) 01:55:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x0, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2319.151150][T10786] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2319.159644][T10786] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:45 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}}, 0x4) [ 2319.285451][T10791] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2319.294414][T10791] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2319.366129][T10793] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 01:55:45 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x0, 0x0) sync_file_range(r2, 0x0, 0x0, 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000080)="8f0dd93468e0e67e75d1bc2bf6ebf1554eeb0ac0b112d357f13b1cde7cf0394f0c67571bfaaa6f9625c72775838e2d20ac5ff5bd0f42661d7fab47faea73a5d0256086e05d078d23eda1e80d3cab09fdc3dfb62651272061aaffbcd17885", &(0x7f0000000100)=@tcp6=r2, 0x2}, 0x20) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 01:55:45 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x0, 0x0) sync_file_range(r0, 0x0, 0x0, 0x1) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0xe2000000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x1) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 01:55:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x88470000}, 0x0) 01:55:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x68000000}, 0x0) 01:55:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x0, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2319.553306][T10796] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}}, 0x5) [ 2319.712457][T10799] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2319.721069][T10799] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:46 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x0, 0x0) sync_file_range(r0, 0x0, 0x0, 0x1) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0xe2000000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x1) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) [ 2319.851744][T10805] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2319.879856][T10804] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2319.888335][T10804] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x88480000}, 0x0) 01:55:46 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) (async) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x0, 0x0) sync_file_range(r2, 0x0, 0x0, 0x1) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000080)="8f0dd93468e0e67e75d1bc2bf6ebf1554eeb0ac0b112d357f13b1cde7cf0394f0c67571bfaaa6f9625c72775838e2d20ac5ff5bd0f42661d7fab47faea73a5d0256086e05d078d23eda1e80d3cab09fdc3dfb62651272061aaffbcd17885", &(0x7f0000000100)=@tcp6=r2, 0x2}, 0x20) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) listen(r3, 0x0) (async) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 01:55:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x0, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:55:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x6c000000}, 0x0) 01:55:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}}, 0x6) [ 2320.181948][T10812] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2320.191683][T10812] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:46 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x0, 0x0) sync_file_range(r0, 0x0, 0x0, 0x1) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0xe2000000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x1) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x0, 0x0) (async) sync_file_range(r0, 0x0, 0x0, 0x1) (async) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0xe2000000) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) close(r1) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r2, 0x1) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) [ 2320.291457][T10814] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2320.356370][T10818] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2320.384002][T10819] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2320.392925][T10819] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x88a8ffff}, 0x0) 01:55:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0xe, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x0, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:55:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}}, 0x7) 01:55:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x74000000}, 0x0) 01:55:47 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) (async) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x0, 0x0) sync_file_range(r2, 0x0, 0x0, 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000080)="8f0dd93468e0e67e75d1bc2bf6ebf1554eeb0ac0b112d357f13b1cde7cf0394f0c67571bfaaa6f9625c72775838e2d20ac5ff5bd0f42661d7fab47faea73a5d0256086e05d078d23eda1e80d3cab09fdc3dfb62651272061aaffbcd17885", &(0x7f0000000100)=@tcp6=r2, 0x2}, 0x20) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) (async) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) [ 2320.738413][T10828] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2320.747435][T10828] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = signalfd(r0, &(0x7f0000000040)={[0x3]}, 0x8) shutdown(r1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004440)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r4, @ANYBLOB="0800a000000000000800270001000000080026006c0900000800b70000000000"], 0x3c}}, 0x0) listen(r2, 0xce35) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) [ 2320.786810][T10827] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 01:55:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0xf, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x0, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:55:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xe0ffffff}, 0x0) 01:55:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}}, 0x8) [ 2320.949845][T10832] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2320.958226][T10832] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:47 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0xfffffffd, @local}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x0, 0x0) sync_file_range(r3, 0x0, 0x0, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) [ 2321.206366][T10839] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2321.218479][T10843] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2321.238449][T10842] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2321.251403][T10842] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x7a000000}, 0x0) 01:55:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = signalfd(r0, &(0x7f0000000040)={[0x3]}, 0x8) shutdown(r1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004440)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r4, @ANYBLOB="0800a000000000000800270001000000080026006c0900000800b70000000000"], 0x3c}}, 0x0) listen(r2, 0xce35) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) (async) signalfd(r0, &(0x7f0000000040)={[0x3]}, 0x8) (async) shutdown(r1, 0x0) (async) close(r0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004440)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r4, @ANYBLOB="0800a000000000000800270001000000080026006c0900000800b70000000000"], 0x3c}}, 0x0) (async) listen(r2, 0xce35) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) 01:55:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x0, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:55:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xf0ffffff}, 0x0) 01:55:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}}, 0x9) [ 2321.505373][T10847] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2321.620308][T10851] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 01:55:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x81000000}, 0x0) 01:55:48 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 32) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0xfffffffd, @local}, 0x1c) (rerun: 32) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x0, 0x0) sync_file_range(r3, 0x0, 0x0, 0x1) (async, rerun: 32) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) (async, rerun: 32) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) [ 2321.775674][T10857] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x11, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x0, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:55:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = signalfd(r0, &(0x7f0000000040)={[0x3]}, 0x8) shutdown(r1, 0x0) (async) shutdown(r1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004440)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r4, @ANYBLOB="0800a000000000000800270001000000080026006c0900000800b70000000000"], 0x3c}}, 0x0) listen(r2, 0xce35) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 01:55:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xfc000000}, 0x0) 01:55:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}}, 0xa) [ 2321.964694][T10860] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2322.064764][T10863] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 01:55:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x88470000}, 0x0) [ 2322.182642][T10870] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2322.206793][T10872] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x0, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:55:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}}, 0xb) 01:55:48 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0xfffffffd, @local}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x0, 0x0) sync_file_range(r3, 0x0, 0x0, 0x1) (async) sync_file_range(r3, 0x0, 0x0, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 01:55:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xfdffffff}, 0x0) [ 2322.415008][T10875] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0xffffffff) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) [ 2322.577899][T10878] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 01:55:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x88480000}, 0x0) [ 2322.659130][T10882] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}}, 0xc) 01:55:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xfe80ffff}, 0x0) 01:55:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x25, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x0, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:55:49 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) [ 2322.912084][T10888] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r0, 0xffffffff) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) [ 2323.004682][T10890] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x88a8ffff}, 0x0) [ 2323.124256][T10893] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2323.196816][T10895] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 01:55:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xfec0ffff}, 0x0) 01:55:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}}, 0xd) [ 2323.336413][T10900] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r0, 0xffffffff) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 01:55:50 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) (async) close(r0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r1, 0xfffffffc) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) [ 2323.540465][T10903] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xe0ffffff}, 0x0) 01:55:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x34, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x0, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:55:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xff000000}, 0x0) 01:55:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}}, 0xe) [ 2323.771682][T10908] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2323.800566][T10912] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 01:55:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xe31f0000}, 0x0) [ 2324.017268][T10916] validate_nla: 11 callbacks suppressed [ 2324.017338][T10916] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2324.032065][T10916] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) pipe(&(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000012c0)=@ccm_128={{0x303}, "c849073672a31f13", "a6a84f5f0c55779287b313b20191309c", "b7dea41b", "f263a299ce92ee48"}, 0x28) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x0, 0x0) sync_file_range(r4, 0x0, 0x0, 0x1) sendto$inet6(r1, &(0x7f0000001340)="0755ccf0e05a18a2996d344615ba1a27674ad8e629e79ff6c95d55977140e98b2b7a70de4fefeaf5e00f30d98622cc9a26898385a13998c29d1f6b6bd2a0d3bb2246d5b7870b583683a786e5753a9844a3163fb1776626b1cbd204d24630eb778cf6b2c114e2e96437e2cad382dc979d324458cd0f3bdd2e5c75ab1ffddae7fa6dac8c50c67752f5f231d25d8a5370c35aff0430f9c4fecaa45cf61633163ba9c5817a53be22cf7bb152ea7891128fd5f02535e4b00b1256835c9893aa574018c8", 0xc1, 0x24000801, 0x0, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000001500)={r4}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001540)={'wlan1\x00'}) connect$inet6(r4, &(0x7f0000001300)={0xa, 0x4e24, 0x68, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, 0x1c) getpeername(r1, &(0x7f0000001440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f00000014c0)=0x80) sync_file_range(r3, 0x0, 0x0, 0x1) sendmmsg$inet6(r3, &(0x7f0000001240)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x9e3d, @loopback, 0x9}, 0x1c, &(0x7f0000001200)=[{&(0x7f0000000080)="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", 0x1000}, {&(0x7f0000001080)="6a0c5bb093367ecf0c891a578ef36150b614da1ddc25dca6385c3d99dab0da90accad765216777ad5c10ef9235", 0x2d}, {&(0x7f00000010c0)="380dc90c7d8a2227d1be54b2bc790a2998f338705cde7e2b6d65090efe757bf3320cb85f7df28b76e861a0ed05a4c00c7db80c2497a64d04667f97d6c7f0d623422e598ac28a7a137823", 0x4a}, {&(0x7f0000001140)="5f391d9cc3bfb8f13d89127b910a6d09d8195e5514c57d102b3e7de6b37588a04b0c6b7948631ad82e0e440bca86eb0bd530692a0d14197cfc99500a88827fc00173321765ebdd1b5ee0feec863d7815109525488c4fa5eb9de4794731d8826f01ed142e0036b2b05e4f69f297647af28e3658eae26a7a979c24253c5f1b31408ec0efa9a5a4b709d2be3bbcaeed66c6b1bc", 0x92}], 0x4}}], 0x1, 0x4000001) listen(r1, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) [ 2324.072527][T10918] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x48, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x0, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:55:50 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r1, 0xfffffffc) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 01:55:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xff600000}, 0x0) [ 2324.215330][T10920] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2324.224330][T10920] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}}, 0xf) [ 2324.281355][T10922] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 01:55:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xe41f0000}, 0x0) 01:55:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x0, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2324.517937][T10929] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2324.535068][T10929] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:51 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x20, 0x10, 0x70bd28, 0x25dfdbff, {0x2, 0x80, 0xb0, 0x1, 0xfe, 0x0, 0x0, 0x6, 0x1bf41642b915a38a}, [@FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x24000040) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 01:55:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) (async) pipe(&(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000012c0)=@ccm_128={{0x303}, "c849073672a31f13", "a6a84f5f0c55779287b313b20191309c", "b7dea41b", "f263a299ce92ee48"}, 0x28) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x0, 0x0) (async) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x0, 0x0) sync_file_range(r4, 0x0, 0x0, 0x1) (async) sendto$inet6(r1, &(0x7f0000001340)="0755ccf0e05a18a2996d344615ba1a27674ad8e629e79ff6c95d55977140e98b2b7a70de4fefeaf5e00f30d98622cc9a26898385a13998c29d1f6b6bd2a0d3bb2246d5b7870b583683a786e5753a9844a3163fb1776626b1cbd204d24630eb778cf6b2c114e2e96437e2cad382dc979d324458cd0f3bdd2e5c75ab1ffddae7fa6dac8c50c67752f5f231d25d8a5370c35aff0430f9c4fecaa45cf61633163ba9c5817a53be22cf7bb152ea7891128fd5f02535e4b00b1256835c9893aa574018c8", 0xc1, 0x24000801, 0x0, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000001500)={r4}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001540)={'wlan1\x00'}) (async) connect$inet6(r4, &(0x7f0000001300)={0xa, 0x4e24, 0x68, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, 0x1c) (async) getpeername(r1, &(0x7f0000001440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f00000014c0)=0x80) (async) sync_file_range(r3, 0x0, 0x0, 0x1) (async) sendmmsg$inet6(r3, &(0x7f0000001240)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x9e3d, @loopback, 0x9}, 0x1c, &(0x7f0000001200)=[{&(0x7f0000000080)="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", 0x1000}, {&(0x7f0000001080)="6a0c5bb093367ecf0c891a578ef36150b614da1ddc25dca6385c3d99dab0da90accad765216777ad5c10ef9235", 0x2d}, {&(0x7f00000010c0)="380dc90c7d8a2227d1be54b2bc790a2998f338705cde7e2b6d65090efe757bf3320cb85f7df28b76e861a0ed05a4c00c7db80c2497a64d04667f97d6c7f0d623422e598ac28a7a137823", 0x4a}, {&(0x7f0000001140)="5f391d9cc3bfb8f13d89127b910a6d09d8195e5514c57d102b3e7de6b37588a04b0c6b7948631ad82e0e440bca86eb0bd530692a0d14197cfc99500a88827fc00173321765ebdd1b5ee0feec863d7815109525488c4fa5eb9de4794731d8826f01ed142e0036b2b05e4f69f297647af28e3658eae26a7a979c24253c5f1b31408ec0efa9a5a4b709d2be3bbcaeed66c6b1bc", 0x92}], 0x4}}], 0x1, 0x4000001) (async) listen(r1, 0x0) (async) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 01:55:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xffff0000}, 0x0) [ 2324.721657][T10934] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2324.737833][T10934] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2324.750220][T10935] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 01:55:51 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}}, 0x10) 01:55:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x0, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:55:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xf0ffffff}, 0x0) [ 2325.006702][T10942] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2325.015630][T10942] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:51 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) (async) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x20, 0x10, 0x70bd28, 0x25dfdbff, {0x2, 0x80, 0xb0, 0x1, 0xfe, 0x0, 0x0, 0x6, 0x1bf41642b915a38a}, [@FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x24000040) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) [ 2325.123042][T10945] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) pipe(&(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000012c0)=@ccm_128={{0x303}, "c849073672a31f13", "a6a84f5f0c55779287b313b20191309c", "b7dea41b", "f263a299ce92ee48"}, 0x28) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x0, 0x0) sync_file_range(r4, 0x0, 0x0, 0x1) sendto$inet6(r1, &(0x7f0000001340)="0755ccf0e05a18a2996d344615ba1a27674ad8e629e79ff6c95d55977140e98b2b7a70de4fefeaf5e00f30d98622cc9a26898385a13998c29d1f6b6bd2a0d3bb2246d5b7870b583683a786e5753a9844a3163fb1776626b1cbd204d24630eb778cf6b2c114e2e96437e2cad382dc979d324458cd0f3bdd2e5c75ab1ffddae7fa6dac8c50c67752f5f231d25d8a5370c35aff0430f9c4fecaa45cf61633163ba9c5817a53be22cf7bb152ea7891128fd5f02535e4b00b1256835c9893aa574018c8", 0xc1, 0x24000801, 0x0, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000001500)={r4}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001540)={'wlan1\x00'}) connect$inet6(r4, &(0x7f0000001300)={0xa, 0x4e24, 0x68, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, 0x1c) getpeername(r1, &(0x7f0000001440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f00000014c0)=0x80) sync_file_range(r3, 0x0, 0x0, 0x1) sendmmsg$inet6(r3, &(0x7f0000001240)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x9e3d, @loopback, 0x9}, 0x1c, &(0x7f0000001200)=[{&(0x7f0000000080)="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", 0x1000}, {&(0x7f0000001080)="6a0c5bb093367ecf0c891a578ef36150b614da1ddc25dca6385c3d99dab0da90accad765216777ad5c10ef9235", 0x2d}, {&(0x7f00000010c0)="380dc90c7d8a2227d1be54b2bc790a2998f338705cde7e2b6d65090efe757bf3320cb85f7df28b76e861a0ed05a4c00c7db80c2497a64d04667f97d6c7f0d623422e598ac28a7a137823", 0x4a}, {&(0x7f0000001140)="5f391d9cc3bfb8f13d89127b910a6d09d8195e5514c57d102b3e7de6b37588a04b0c6b7948631ad82e0e440bca86eb0bd530692a0d14197cfc99500a88827fc00173321765ebdd1b5ee0feec863d7815109525488c4fa5eb9de4794731d8826f01ed142e0036b2b05e4f69f297647af28e3658eae26a7a979c24253c5f1b31408ec0efa9a5a4b709d2be3bbcaeed66c6b1bc", 0x92}], 0x4}}], 0x1, 0x4000001) listen(r1, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) (async) close(r0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) (async) pipe(&(0x7f0000001280)) (async) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000012c0)=@ccm_128={{0x303}, "c849073672a31f13", "a6a84f5f0c55779287b313b20191309c", "b7dea41b", "f263a299ce92ee48"}, 0x28) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x0, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x0, 0x0) (async) sync_file_range(r4, 0x0, 0x0, 0x1) (async) sendto$inet6(r1, &(0x7f0000001340)="0755ccf0e05a18a2996d344615ba1a27674ad8e629e79ff6c95d55977140e98b2b7a70de4fefeaf5e00f30d98622cc9a26898385a13998c29d1f6b6bd2a0d3bb2246d5b7870b583683a786e5753a9844a3163fb1776626b1cbd204d24630eb778cf6b2c114e2e96437e2cad382dc979d324458cd0f3bdd2e5c75ab1ffddae7fa6dac8c50c67752f5f231d25d8a5370c35aff0430f9c4fecaa45cf61633163ba9c5817a53be22cf7bb152ea7891128fd5f02535e4b00b1256835c9893aa574018c8", 0xc1, 0x24000801, 0x0, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000001500)={r4}, 0x8) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001540)={'wlan1\x00'}) (async) connect$inet6(r4, &(0x7f0000001300)={0xa, 0x4e24, 0x68, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, 0x1c) (async) getpeername(r1, &(0x7f0000001440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f00000014c0)=0x80) (async) sync_file_range(r3, 0x0, 0x0, 0x1) (async) sendmmsg$inet6(r3, &(0x7f0000001240)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x9e3d, @loopback, 0x9}, 0x1c, &(0x7f0000001200)=[{&(0x7f0000000080)="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", 0x1000}, {&(0x7f0000001080)="6a0c5bb093367ecf0c891a578ef36150b614da1ddc25dca6385c3d99dab0da90accad765216777ad5c10ef9235", 0x2d}, {&(0x7f00000010c0)="380dc90c7d8a2227d1be54b2bc790a2998f338705cde7e2b6d65090efe757bf3320cb85f7df28b76e861a0ed05a4c00c7db80c2497a64d04667f97d6c7f0d623422e598ac28a7a137823", 0x4a}, {&(0x7f0000001140)="5f391d9cc3bfb8f13d89127b910a6d09d8195e5514c57d102b3e7de6b37588a04b0c6b7948631ad82e0e440bca86eb0bd530692a0d14197cfc99500a88827fc00173321765ebdd1b5ee0feec863d7815109525488c4fa5eb9de4794731d8826f01ed142e0036b2b05e4f69f297647af28e3658eae26a7a979c24253c5f1b31408ec0efa9a5a4b709d2be3bbcaeed66c6b1bc", 0x92}], 0x4}}], 0x1, 0x4000001) (async) listen(r1, 0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) 01:55:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xffff80fe}, 0x0) 01:55:51 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}}, 0x11) [ 2325.283265][T10948] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2325.301963][T10950] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2325.310793][T10950] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2325.534979][T10957] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2325.552476][T10957] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xfc000000}, 0x0) 01:55:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x68, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x0, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:55:52 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x20, 0x10, 0x70bd28, 0x25dfdbff, {0x2, 0x80, 0xb0, 0x1, 0xfe, 0x0, 0x0, 0x6, 0x1bf41642b915a38a}, [@FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x24000040) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) (async) close(r0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x20, 0x10, 0x70bd28, 0x25dfdbff, {0x2, 0x80, 0xb0, 0x1, 0xfe, 0x0, 0x0, 0x6, 0x1bf41642b915a38a}, [@FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x24000040) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) 01:55:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}}, 0x12) 01:55:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x0, 0x0) sync_file_range(r2, 0x0, 0x0, 0x1) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) listen(r1, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 01:55:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xffffa888}, 0x0) [ 2325.772290][T10962] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2325.781428][T10962] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2325.882988][T10968] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2325.891214][T10966] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 01:55:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}}, 0x25) 01:55:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xfdffffff}, 0x0) [ 2326.048626][T10972] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2326.064543][T10972] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2326.082314][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. 01:55:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x6c, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x0, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:55:52 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0xf83a, 0x7800, 0xdb53, 0x1000, {{0x31, 0x4, 0x2, 0x8, 0xc4, 0x66, 0x0, 0x80, 0x29, 0x0, @remote, @multicast1, {[@timestamp_prespec={0x44, 0xc, 0x83, 0x3, 0xc, [{@empty, 0x8}]}, @rr={0x7, 0xf, 0xac, [@broadcast, @rand_addr=0x64010101, @loopback]}, @timestamp_addr={0x44, 0x44, 0xbe, 0x1, 0x9, [{@empty, 0x7}, {@local, 0x1}, {@local, 0x6}, {@rand_addr=0x64010101, 0x8}, {@private=0xa010102, 0x9}, {@empty, 0x6e3}, {@loopback, 0x50}, {@broadcast, 0x9}]}, @rr={0x7, 0x17, 0xbb, [@local, @local, @empty, @empty, @remote]}, @cipso={0x86, 0x3a, 0x2, [{0x6, 0xa, "4cd0fb79fdd1afc4"}, {0x7, 0xd, "63926f289c47a8bc7a1547"}, {0x7, 0xb, "132e6d40361544b226"}, {0x7, 0x12, "c4575c853e0c37d46c2c7447a758254e"}]}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv6_newaddrlabel={0x60, 0x48, 0x0, 0x70bd26, 0x25dfdbfd, {0xa, 0x0, 0x38, 0x0, r3, 0xffffffc1}, [@IFAL_ADDRESS={0x14, 0x1, @remote}, @IFAL_ADDRESS={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x2e}}]}, 0x60}, 0x1, 0x0, 0x0, 0x399ea2457fb716e8}, 0x4804) 01:55:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xffffc0fe}, 0x0) 01:55:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x0, 0x0) sync_file_range(r2, 0x0, 0x0, 0x1) (async) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) (async) listen(r1, 0x0) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) [ 2326.351424][T10979] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2326.360056][T10979] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2326.413844][T10982] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 01:55:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}}, 0x48) [ 2326.504483][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. 01:55:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xfe80ffff}, 0x0) 01:55:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x74, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x0, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2326.563427][T10986] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2326.684170][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. 01:55:53 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r1, 0x0) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0xf83a, 0x7800, 0xdb53, 0x1000, {{0x31, 0x4, 0x2, 0x8, 0xc4, 0x66, 0x0, 0x80, 0x29, 0x0, @remote, @multicast1, {[@timestamp_prespec={0x44, 0xc, 0x83, 0x3, 0xc, [{@empty, 0x8}]}, @rr={0x7, 0xf, 0xac, [@broadcast, @rand_addr=0x64010101, @loopback]}, @timestamp_addr={0x44, 0x44, 0xbe, 0x1, 0x9, [{@empty, 0x7}, {@local, 0x1}, {@local, 0x6}, {@rand_addr=0x64010101, 0x8}, {@private=0xa010102, 0x9}, {@empty, 0x6e3}, {@loopback, 0x50}, {@broadcast, 0x9}]}, @rr={0x7, 0x17, 0xbb, [@local, @local, @empty, @empty, @remote]}, @cipso={0x86, 0x3a, 0x2, [{0x6, 0xa, "4cd0fb79fdd1afc4"}, {0x7, 0xd, "63926f289c47a8bc7a1547"}, {0x7, 0xb, "132e6d40361544b226"}, {0x7, 0x12, "c4575c853e0c37d46c2c7447a758254e"}]}]}}}}}) (rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv6_newaddrlabel={0x60, 0x48, 0x0, 0x70bd26, 0x25dfdbfd, {0xa, 0x0, 0x38, 0x0, r3, 0xffffffc1}, [@IFAL_ADDRESS={0x14, 0x1, @remote}, @IFAL_ADDRESS={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x2e}}]}, 0x60}, 0x1, 0x0, 0x0, 0x399ea2457fb716e8}, 0x4804) 01:55:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x0, 0x0) sync_file_range(r2, 0x0, 0x0, 0x1) (async) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) listen(r1, 0x0) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) [ 2326.780822][T10995] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2326.833047][T10996] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2326.843422][T10994] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xffffff7f}, 0x0) 01:55:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xfec0ffff}, 0x0) 01:55:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x7a, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x0, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:55:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}}, 0x4c) [ 2327.159186][T11005] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2327.215881][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2327.266597][T11011] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2327.305399][T11012] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2327.320381][T11010] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xffffffe0}, 0x0) 01:55:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 01:55:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}}, 0x60) 01:55:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xff000000}, 0x0) 01:55:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x0, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2327.755396][T11017] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2327.818921][T11019] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2327.856946][T11022] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2327.891808][T11021] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) (async) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 01:55:54 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0xf83a, 0x7800, 0xdb53, 0x1000, {{0x31, 0x4, 0x2, 0x8, 0xc4, 0x66, 0x0, 0x80, 0x29, 0x0, @remote, @multicast1, {[@timestamp_prespec={0x44, 0xc, 0x83, 0x3, 0xc, [{@empty, 0x8}]}, @rr={0x7, 0xf, 0xac, [@broadcast, @rand_addr=0x64010101, @loopback]}, @timestamp_addr={0x44, 0x44, 0xbe, 0x1, 0x9, [{@empty, 0x7}, {@local, 0x1}, {@local, 0x6}, {@rand_addr=0x64010101, 0x8}, {@private=0xa010102, 0x9}, {@empty, 0x6e3}, {@loopback, 0x50}, {@broadcast, 0x9}]}, @rr={0x7, 0x17, 0xbb, [@local, @local, @empty, @empty, @remote]}, @cipso={0x86, 0x3a, 0x2, [{0x6, 0xa, "4cd0fb79fdd1afc4"}, {0x7, 0xd, "63926f289c47a8bc7a1547"}, {0x7, 0xb, "132e6d40361544b226"}, {0x7, 0x12, "c4575c853e0c37d46c2c7447a758254e"}]}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv6_newaddrlabel={0x60, 0x48, 0x0, 0x70bd26, 0x25dfdbfd, {0xa, 0x0, 0x38, 0x0, r3, 0xffffffc1}, [@IFAL_ADDRESS={0x14, 0x1, @remote}, @IFAL_ADDRESS={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x2e}}]}, 0x60}, 0x1, 0x0, 0x0, 0x399ea2457fb716e8}, 0x4804) socket$inet6_tcp(0xa, 0x1, 0x0) (async) close(r0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r1, 0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0xf83a, 0x7800, 0xdb53, 0x1000, {{0x31, 0x4, 0x2, 0x8, 0xc4, 0x66, 0x0, 0x80, 0x29, 0x0, @remote, @multicast1, {[@timestamp_prespec={0x44, 0xc, 0x83, 0x3, 0xc, [{@empty, 0x8}]}, @rr={0x7, 0xf, 0xac, [@broadcast, @rand_addr=0x64010101, @loopback]}, @timestamp_addr={0x44, 0x44, 0xbe, 0x1, 0x9, [{@empty, 0x7}, {@local, 0x1}, {@local, 0x6}, {@rand_addr=0x64010101, 0x8}, {@private=0xa010102, 0x9}, {@empty, 0x6e3}, {@loopback, 0x50}, {@broadcast, 0x9}]}, @rr={0x7, 0x17, 0xbb, [@local, @local, @empty, @empty, @remote]}, @cipso={0x86, 0x3a, 0x2, [{0x6, 0xa, "4cd0fb79fdd1afc4"}, {0x7, 0xd, "63926f289c47a8bc7a1547"}, {0x7, 0xb, "132e6d40361544b226"}, {0x7, 0x12, "c4575c853e0c37d46c2c7447a758254e"}]}]}}}}}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv6_newaddrlabel={0x60, 0x48, 0x0, 0x70bd26, 0x25dfdbfd, {0xa, 0x0, 0x38, 0x0, r3, 0xffffffc1}, [@IFAL_ADDRESS={0x14, 0x1, @remote}, @IFAL_ADDRESS={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x2e}}]}, 0x60}, 0x1, 0x0, 0x0, 0x399ea2457fb716e8}, 0x4804) (async) 01:55:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xfffffff0}, 0x0) 01:55:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xff600000}, 0x0) 01:55:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}}, 0x68) 01:55:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0xfc, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x0, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2328.222842][T11025] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2328.256808][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. 01:55:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xfffffffd}, 0x0) [ 2328.322253][T11030] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2328.343690][T11035] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2328.421943][T11036] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 01:55:54 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e2e, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 01:55:55 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) listen(r1, 0x0) (async) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 01:55:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xffff0000}, 0x0) 01:55:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}}, 0x6c) 01:55:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x2cc, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x0, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2328.633067][T11038] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2328.787260][T11045] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2328.797031][T11044] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x60ffffffffff}, 0x0) [ 2328.863237][T11048] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 01:55:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xffff80fe}, 0x0) 01:55:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}}, 0x74) 01:55:55 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e2e, 0x0, @empty}, 0x1c) (async) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 01:55:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x300, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x0, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:55:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)="f09acaebec8548e3e3cb08fbc1995f06f7297f590936dc7d2185c82b6207302af36b15e24a9b13c0bd3b81d3af58766db51142ed56d3805b94cabd4ac2e65e88d18e56d07e5502512bbd2d91768315f6196485df666f0fc47cfcafc4868a9bbeaf1687a66b4ff780876afddd088491bf320e3e121963b6766fd796b61352cfd346d0c26088122c3608c23dd6b37857307e6266b8c0fe66939f7dc7a4e844e89e3468ea81710866d5aa5e2d0556704b789bfedb3df6ae991e3b3d927dd08f2fabdd241128dcb9f402bb", 0xc9}], 0x1}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000500)="fcfdfa478aad447d5f49b08c4969717b2e95c8458b9982c513625589b7393f15af53c7f7cc9443d2ab50769bf2d6245054709b8b56e4533f038bd4edc0e60785b27f048d67cdc61e2c186b0d9bf3c4face9d0e4460fd29cec857f82b996d58769e7f93d2b1f735ef4743cddcd6d403486dabe27759df5fa2b4a312671964b9b98e8232912affb67eaa22ced1e4d184e54bcc291b0dc8efb832775b0144a098d1d19fb4ef31c67cb7eb5d7456aaacbc260d03d3f2e41a5d4c1992d1357a54675ab41043849f60fcc2fb", 0xc9}], 0x1}}], 0x2, 0x401c0) syz_genetlink_get_family_id$ethtool(0x0, r2) recvmsg(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/125, 0x7d}], 0x1}, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000002a00)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000680)=""/235, 0xeb}, &(0x7f0000002880)=[{&(0x7f0000000780)=""/49, 0x31}], 0x1}}], 0x48}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x208) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000000180), 0x4) sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) shutdown(r4, 0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001700)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [], [0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xaad, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xa0, 0x1000000000, 0x14, 0x3, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x4000000000000400, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x10b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x400, 0x4]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f00000040c0)={r5, 0x40, 0x8, 0x1}) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000000bc0)=ANY=[@ANYRES32=r2, @ANYBLOB="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", @ANYRESDEC=r5, @ANYBLOB="3a2b20388c1e3030303030303030386b000000000000000000000054eb0e14d89af69294a63ad34ce49b0c82023645c73ac769b69df8fc9236479f70b5cd849cab101d38932165"]) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000200)={r5, 0x2, 0x4, 0x1}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000040)={r5, 0x8, 0x1, [0x8000000000000000, 0x13, 0x7, 0x0, 0x8000], [0x4, 0xcf, 0x5, 0x1, 0xfffffffffffffe01, 0x1f, 0x7, 0x8, 0x8, 0x6, 0x33b6, 0x4, 0x9, 0x100000000, 0xffffffffffffc078, 0x5, 0x2, 0x0, 0x4, 0x100000000, 0x8, 0x1, 0x2, 0x1, 0x51f, 0x200, 0x3f, 0xef, 0x7, 0x3, 0x6, 0xff, 0x25b9, 0x80000001, 0x100000001, 0x4, 0x9, 0x275, 0x6, 0xfffffffffffffff8, 0x29, 0x7fffffffffffffff, 0x0, 0xfffffffffffffffa, 0x1, 0xe9b3, 0x1, 0x9, 0xd6b, 0x6eeb, 0x9, 0x4, 0x7fffffffffffffff, 0x7, 0x5, 0xa9, 0x2, 0x7, 0x300000000000000, 0xfffffffffffffffc, 0x5, 0x7, 0x7f, 0xc15, 0x7f, 0x8001, 0x1, 0x2, 0x0, 0x7, 0x8, 0x1, 0x7fffffffffffffff, 0x1, 0xffffffffffffff00, 0x2, 0x8203, 0x100, 0x80000000, 0x61, 0x100000000, 0x6237, 0x5, 0x4, 0xdfd4, 0x1, 0x1, 0xffffffff, 0x800, 0x4, 0x6, 0x3f, 0x4, 0x3, 0x1000, 0x3, 0x401, 0x101, 0x101, 0x7, 0x78, 0xffff, 0x9, 0xfffffffffffffffa, 0x10001, 0x6, 0x1, 0x6b, 0x0, 0x6, 0x2, 0x100, 0x8, 0x9, 0x100000001, 0x400, 0x4, 0x6, 0x7, 0xa8f, 0x8]}) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) [ 2329.191896][T11052] validate_nla: 10 callbacks suppressed [ 2329.191964][T11052] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2329.206861][T11052] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2329.254439][T11056] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2329.263454][T11056] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2329.274902][T11057] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2329.304352][T11055] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:55 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e2e, 0x0, @empty}, 0x1c) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e2e, 0x0, @empty}, 0x1c) listen(r1, 0x0) (async) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 01:55:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xffff00000000}, 0x0) 01:55:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xffffa888}, 0x0) [ 2329.471522][T11060] rdma_op ffff888031c43d80 conn xmit_rdma 0000000000000000 01:55:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x500, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x0, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:55:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}}, 0x7a) [ 2329.692837][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2329.709216][T11066] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2329.717983][T11066] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2329.811744][T11072] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2329.827673][T11073] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xffffc0fe}, 0x0) 01:55:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r1, 0x0) (async) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) (async) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) sendmmsg$inet(r2, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)="f09acaebec8548e3e3cb08fbc1995f06f7297f590936dc7d2185c82b6207302af36b15e24a9b13c0bd3b81d3af58766db51142ed56d3805b94cabd4ac2e65e88d18e56d07e5502512bbd2d91768315f6196485df666f0fc47cfcafc4868a9bbeaf1687a66b4ff780876afddd088491bf320e3e121963b6766fd796b61352cfd346d0c26088122c3608c23dd6b37857307e6266b8c0fe66939f7dc7a4e844e89e3468ea81710866d5aa5e2d0556704b789bfedb3df6ae991e3b3d927dd08f2fabdd241128dcb9f402bb", 0xc9}], 0x1}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000500)="fcfdfa478aad447d5f49b08c4969717b2e95c8458b9982c513625589b7393f15af53c7f7cc9443d2ab50769bf2d6245054709b8b56e4533f038bd4edc0e60785b27f048d67cdc61e2c186b0d9bf3c4face9d0e4460fd29cec857f82b996d58769e7f93d2b1f735ef4743cddcd6d403486dabe27759df5fa2b4a312671964b9b98e8232912affb67eaa22ced1e4d184e54bcc291b0dc8efb832775b0144a098d1d19fb4ef31c67cb7eb5d7456aaacbc260d03d3f2e41a5d4c1992d1357a54675ab41043849f60fcc2fb", 0xc9}], 0x1}}], 0x2, 0x401c0) (async) syz_genetlink_get_family_id$ethtool(0x0, r2) (async) recvmsg(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/125, 0x7d}], 0x1}, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000002a00)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000680)=""/235, 0xeb}, &(0x7f0000002880)=[{&(0x7f0000000780)=""/49, 0x31}], 0x1}}], 0x48}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x208) (async) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) (async) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000000180), 0x4) sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) (async) shutdown(r4, 0x1) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001700)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [], [0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xaad, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xa0, 0x1000000000, 0x14, 0x3, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x4000000000000400, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x10b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x400, 0x4]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f00000040c0)={r5, 0x40, 0x8, 0x1}) (async) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000000bc0)=ANY=[@ANYRES32=r2, @ANYBLOB="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", @ANYRESDEC=r5, @ANYBLOB="3a2b20388c1e3030303030303030386b000000000000000000000054eb0e14d89af69294a63ad34ce49b0c82023645c73ac769b69df8fc9236479f70b5cd849cab101d38932165"]) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000200)={r5, 0x2, 0x4, 0x1}) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000040)={r5, 0x8, 0x1, [0x8000000000000000, 0x13, 0x7, 0x0, 0x8000], [0x4, 0xcf, 0x5, 0x1, 0xfffffffffffffe01, 0x1f, 0x7, 0x8, 0x8, 0x6, 0x33b6, 0x4, 0x9, 0x100000000, 0xffffffffffffc078, 0x5, 0x2, 0x0, 0x4, 0x100000000, 0x8, 0x1, 0x2, 0x1, 0x51f, 0x200, 0x3f, 0xef, 0x7, 0x3, 0x6, 0xff, 0x25b9, 0x80000001, 0x100000001, 0x4, 0x9, 0x275, 0x6, 0xfffffffffffffff8, 0x29, 0x7fffffffffffffff, 0x0, 0xfffffffffffffffa, 0x1, 0xe9b3, 0x1, 0x9, 0xd6b, 0x6eeb, 0x9, 0x4, 0x7fffffffffffffff, 0x7, 0x5, 0xa9, 0x2, 0x7, 0x300000000000000, 0xfffffffffffffffc, 0x5, 0x7, 0x7f, 0xc15, 0x7f, 0x8001, 0x1, 0x2, 0x0, 0x7, 0x8, 0x1, 0x7fffffffffffffff, 0x1, 0xffffffffffffff00, 0x2, 0x8203, 0x100, 0x80000000, 0x61, 0x100000000, 0x6237, 0x5, 0x4, 0xdfd4, 0x1, 0x1, 0xffffffff, 0x800, 0x4, 0x6, 0x3f, 0x4, 0x3, 0x1000, 0x3, 0x401, 0x101, 0x101, 0x7, 0x78, 0xffff, 0x9, 0xfffffffffffffffa, 0x10001, 0x6, 0x1, 0x6b, 0x0, 0x6, 0x2, 0x100, 0x8, 0x9, 0x100000001, 0x400, 0x4, 0x6, 0x7, 0xa8f, 0x8]}) (async) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 01:55:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x40030000000000}, 0x0) 01:55:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}}, 0xfc) 01:55:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004440)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00'}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 01:55:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x600, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x0, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2330.202580][T11076] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2330.211373][T11076] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2330.256500][T11082] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2330.265118][T11082] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xffffe000}, 0x0) [ 2330.304468][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2330.315857][T11083] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2330.327963][T11079] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004440)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00'}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004440)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x3c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00'}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) close(r3) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r4, 0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) [ 2330.438841][T11085] rdma_op ffff8880b21e8580 conn xmit_rdma 0000000000000000 01:55:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x100000000000000}, 0x0) 01:55:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}}, 0x300) 01:55:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x700, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x0, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2330.598334][T11090] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2330.607351][T11090] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:57 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) (async) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)="f09acaebec8548e3e3cb08fbc1995f06f7297f590936dc7d2185c82b6207302af36b15e24a9b13c0bd3b81d3af58766db51142ed56d3805b94cabd4ac2e65e88d18e56d07e5502512bbd2d91768315f6196485df666f0fc47cfcafc4868a9bbeaf1687a66b4ff780876afddd088491bf320e3e121963b6766fd796b61352cfd346d0c26088122c3608c23dd6b37857307e6266b8c0fe66939f7dc7a4e844e89e3468ea81710866d5aa5e2d0556704b789bfedb3df6ae991e3b3d927dd08f2fabdd241128dcb9f402bb", 0xc9}], 0x1}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000500)="fcfdfa478aad447d5f49b08c4969717b2e95c8458b9982c513625589b7393f15af53c7f7cc9443d2ab50769bf2d6245054709b8b56e4533f038bd4edc0e60785b27f048d67cdc61e2c186b0d9bf3c4face9d0e4460fd29cec857f82b996d58769e7f93d2b1f735ef4743cddcd6d403486dabe27759df5fa2b4a312671964b9b98e8232912affb67eaa22ced1e4d184e54bcc291b0dc8efb832775b0144a098d1d19fb4ef31c67cb7eb5d7456aaacbc260d03d3f2e41a5d4c1992d1357a54675ab41043849f60fcc2fb", 0xc9}], 0x1}}], 0x2, 0x401c0) syz_genetlink_get_family_id$ethtool(0x0, r2) recvmsg(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/125, 0x7d}], 0x1}, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000002a00)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000680)=""/235, 0xeb}, &(0x7f0000002880)=[{&(0x7f0000000780)=""/49, 0x31}], 0x1}}], 0x48}, 0x0) (async) sendmsg$rds(r3, &(0x7f0000002a00)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000680)=""/235, 0xeb}, &(0x7f0000002880)=[{&(0x7f0000000780)=""/49, 0x31}], 0x1}}], 0x48}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x208) (async) ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x208) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000000180), 0x4) (async) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000000180), 0x4) sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) (async) sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) shutdown(r4, 0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001700)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [], [0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xaad, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xa0, 0x1000000000, 0x14, 0x3, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x4000000000000400, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x10b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x400, 0x4]}) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [], [0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xaad, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xa0, 0x1000000000, 0x14, 0x3, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x4000000000000400, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x10b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x400, 0x4]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f00000040c0)={r5, 0x40, 0x8, 0x1}) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f00000040c0)={r5, 0x40, 0x8, 0x1}) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000000bc0)=ANY=[@ANYRES32=r2, @ANYBLOB="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", @ANYRESDEC=r5, @ANYBLOB="3a2b20388c1e3030303030303030386b000000000000000000000054eb0e14d89af69294a63ad34ce49b0c82023645c73ac769b69df8fc9236479f70b5cd849cab101d38932165"]) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000200)={r5, 0x2, 0x4, 0x1}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000040)={r5, 0x8, 0x1, [0x8000000000000000, 0x13, 0x7, 0x0, 0x8000], [0x4, 0xcf, 0x5, 0x1, 0xfffffffffffffe01, 0x1f, 0x7, 0x8, 0x8, 0x6, 0x33b6, 0x4, 0x9, 0x100000000, 0xffffffffffffc078, 0x5, 0x2, 0x0, 0x4, 0x100000000, 0x8, 0x1, 0x2, 0x1, 0x51f, 0x200, 0x3f, 0xef, 0x7, 0x3, 0x6, 0xff, 0x25b9, 0x80000001, 0x100000001, 0x4, 0x9, 0x275, 0x6, 0xfffffffffffffff8, 0x29, 0x7fffffffffffffff, 0x0, 0xfffffffffffffffa, 0x1, 0xe9b3, 0x1, 0x9, 0xd6b, 0x6eeb, 0x9, 0x4, 0x7fffffffffffffff, 0x7, 0x5, 0xa9, 0x2, 0x7, 0x300000000000000, 0xfffffffffffffffc, 0x5, 0x7, 0x7f, 0xc15, 0x7f, 0x8001, 0x1, 0x2, 0x0, 0x7, 0x8, 0x1, 0x7fffffffffffffff, 0x1, 0xffffffffffffff00, 0x2, 0x8203, 0x100, 0x80000000, 0x61, 0x100000000, 0x6237, 0x5, 0x4, 0xdfd4, 0x1, 0x1, 0xffffffff, 0x800, 0x4, 0x6, 0x3f, 0x4, 0x3, 0x1000, 0x3, 0x401, 0x101, 0x101, 0x7, 0x78, 0xffff, 0x9, 0xfffffffffffffffa, 0x10001, 0x6, 0x1, 0x6b, 0x0, 0x6, 0x2, 0x100, 0x8, 0x9, 0x100000001, 0x400, 0x4, 0x6, 0x7, 0xa8f, 0x8]}) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) [ 2330.795202][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2330.828512][T11094] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2330.836979][T11094] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xffffff7f}, 0x0) [ 2330.919288][T11101] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2330.934623][T11100] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004440)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00'}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r4, 0x0) (async) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 01:55:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x200000000000000}, 0x0) [ 2331.102339][T11104] rdma_op ffff8880b7738580 conn xmit_rdma 0000000000000000 [ 2331.131404][T11106] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2331.139945][T11106] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}}, 0x500) 01:55:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x900, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x0, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2331.160848][T11103] rdma_op ffff8880b76e2180 conn xmit_rdma 0000000000000000 01:55:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xffffffe0}, 0x0) [ 2331.411676][T11114] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2331.419973][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2331.430481][T11114] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2331.441115][T11116] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000080)={@in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, 0x0, 0x0, 0x3c, 0x0, "3bf7222c927538e85f99549d23e2919013b3fe00affad9006c95dab21c16cf05c867f9dbba3eb79568c2a66ae283099cd4e3a16105cdeaf5fe4c9815489a2e9e4b17c1a7982f8c6afdcfab73b74e6805"}, 0xd8) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) r4 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r5, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@rand_addr=0x64010102, 0x4e20, 0x1, 0x4e21, 0x0, 0x2, 0x80, 0x20, 0x2c, 0x0, r5}, {0x7, 0x9, 0x6, 0x800, 0x8, 0x1, 0x9}, {0x4, 0x7, 0xff, 0x1d0}, 0xaff, 0x6e6bb7, 0x2, 0x0, 0x2, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4d6, 0x6c}, 0x2, @in6=@mcast2, 0x0, 0x0, 0x2, 0x7, 0x8001, 0x5000000, 0xd83}}, 0xe8) listen(r2, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) [ 2331.525822][T11118] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 01:55:58 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = signalfd4(r0, &(0x7f0000000040)={[0x200]}, 0x8, 0x80c00) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000080), &(0x7f00000000c0)=0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 01:55:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x300000000000000}, 0x0) 01:55:58 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}}, 0x600) 01:55:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0xa00, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x0, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2331.694662][T11121] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2331.703364][T11121] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2331.710591][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. 01:55:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000080)={@in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, 0x0, 0x0, 0x3c, 0x0, "3bf7222c927538e85f99549d23e2919013b3fe00affad9006c95dab21c16cf05c867f9dbba3eb79568c2a66ae283099cd4e3a16105cdeaf5fe4c9815489a2e9e4b17c1a7982f8c6afdcfab73b74e6805"}, 0xd8) (async) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 32) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) (async) r4 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r5, 0x0) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@rand_addr=0x64010102, 0x4e20, 0x1, 0x4e21, 0x0, 0x2, 0x80, 0x20, 0x2c, 0x0, r5}, {0x7, 0x9, 0x6, 0x800, 0x8, 0x1, 0x9}, {0x4, 0x7, 0xff, 0x1d0}, 0xaff, 0x6e6bb7, 0x2, 0x0, 0x2, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4d6, 0x6c}, 0x2, @in6=@mcast2, 0x0, 0x0, 0x2, 0x7, 0x8001, 0x5000000, 0xd83}}, 0xe8) (async) listen(r2, 0x0) (async, rerun: 32) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 32) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) [ 2331.913113][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. 01:55:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xfffffff0}, 0x0) [ 2331.974038][T11127] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2331.987099][T11129] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2332.054221][T11130] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:58 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r3 = signalfd4(r0, &(0x7f0000000040)={[0x200]}, 0x8, 0x80c00) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 01:55:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x400000000000000}, 0x0) 01:55:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0xb00, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x0, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2332.233621][T11135] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:58 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}}, 0x700) 01:55:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000080)={@in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, 0x0, 0x0, 0x3c, 0x0, "3bf7222c927538e85f99549d23e2919013b3fe00affad9006c95dab21c16cf05c867f9dbba3eb79568c2a66ae283099cd4e3a16105cdeaf5fe4c9815489a2e9e4b17c1a7982f8c6afdcfab73b74e6805"}, 0xd8) close(r0) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) (async) r4 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r5, 0x0) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@rand_addr=0x64010102, 0x4e20, 0x1, 0x4e21, 0x0, 0x2, 0x80, 0x20, 0x2c, 0x0, r5}, {0x7, 0x9, 0x6, 0x800, 0x8, 0x1, 0x9}, {0x4, 0x7, 0xff, 0x1d0}, 0xaff, 0x6e6bb7, 0x2, 0x0, 0x2, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4d6, 0x6c}, 0x2, @in6=@mcast2, 0x0, 0x0, 0x2, 0x7, 0x8001, 0x5000000, 0xd83}}, 0xe8) (async) listen(r2, 0x0) (async) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 01:55:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xfffffffd}, 0x0) [ 2332.484543][T11142] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) (async, rerun: 64) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 64) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r3 = signalfd4(r0, &(0x7f0000000040)={[0x200]}, 0x8, 0x80c00) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) [ 2332.551116][T11145] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 01:55:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x500000000000000}, 0x0) [ 2332.627416][T11146] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x0, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2332.777967][T11151] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}}, 0x900) [ 2332.833997][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2332.931373][T11156] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x60ffffffffff}, 0x0) 01:55:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x600000000000000}, 0x0) [ 2333.073470][T11160] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 01:55:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$igmp6(0xa, 0x3, 0x2) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e24, 0xffffffff, @mcast1, 0x4}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000080)=0x9, 0x4) listen(r1, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) [ 2333.193985][T11163] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2333.213145][T11162] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0xd00, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x0, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:55:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) recvmsg(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001200), 0x4, &(0x7f0000000100)=""/144, 0x80}, 0x41) 01:55:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xffff00000000}, 0x0) [ 2333.381698][T11165] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:55:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}}, 0xa00) 01:56:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x700000000000000}, 0x0) [ 2333.541699][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2333.604052][T11170] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2333.663024][T11173] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2333.688014][T11174] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:56:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$igmp6(0xa, 0x3, 0x2) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e24, 0xffffffff, @mcast1, 0x4}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000080)=0x9, 0x4) listen(r1, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) (async) close(r0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) socket$igmp6(0xa, 0x3, 0x2) (async) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e24, 0xffffffff, @mcast1, 0x4}, 0x1c) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000080)=0x9, 0x4) (async) listen(r1, 0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) 01:56:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0xe00, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x0, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:56:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x40030000000000}, 0x0) [ 2333.836130][T11176] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2333.872130][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. 01:56:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}}, 0xb00) 01:56:00 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r1, 0x0) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async, rerun: 64) recvmsg(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001200), 0x4, &(0x7f0000000100)=""/144, 0x80}, 0x41) (rerun: 64) 01:56:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x800000000000000}, 0x0) [ 2334.031646][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2334.063955][T11182] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2334.156105][T11183] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2334.193727][T11187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:56:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$igmp6(0xa, 0x3, 0x2) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e24, 0xffffffff, @mcast1, 0x4}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000080)=0x9, 0x4) listen(r1, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) (async) close(r0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) socket$igmp6(0xa, 0x3, 0x2) (async) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e24, 0xffffffff, @mcast1, 0x4}, 0x1c) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000080)=0x9, 0x4) (async) listen(r1, 0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) 01:56:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xe0ffff00000000}, 0x0) [ 2334.340761][T11191] validate_nla: 10 callbacks suppressed [ 2334.340839][T11191] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2334.359190][T11191] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:56:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0xf00, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x0, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:56:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}}, 0xc00) [ 2334.400829][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. 01:56:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x900000000000000}, 0x0) 01:56:01 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r1, 0x0) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) recvmsg(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001200), 0x4, &(0x7f0000000100)=""/144, 0x80}, 0x41) [ 2334.613286][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2334.632576][T11195] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2334.641199][T11195] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2334.677928][T11199] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2334.686491][T11200] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 01:56:01 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}}, 0xd00) 01:56:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0x100000000000000}, 0x0) 01:56:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x1100, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x0, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 01:56:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xe7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x5}, 0x48) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x84010, r1, 0xcbfa1000) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r3, 0x800443d3, &(0x7f0000000100)={@any, 0x1a4, 0x0, 0x9}) listen(r2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = dup(r4) sendto$inet(r5, &(0x7f0000000140)="b3cebf67f8e05cbf98b4e970340bc144c31d6537596ccc42ec96f934e098f79f823a85381bc413a6601f8306c6de96143f4b0d9f5cf53b462dddba60", 0x3c, 0x0, &(0x7f0000000180)={0x2, 0x4e22, @private=0xa010102}, 0x10) [ 2334.856881][T11206] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2334.873211][T11206] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2335.046560][T11212] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 01:56:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}, 0x1, 0xa00000000000000}, 0x0) [ 2335.128973][T11215] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2335.137728][T11215] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2335.174872][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2335.187077][T11218] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 01:56:01 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000000400)="7293b0dafdb93d148e772fb7476ef8d8ec4ebfdcec9b4cb58df2fdc10b4732f7dd51564fc2fd45b7e4c41e98bc934bb829e7f45828462558d6fcd5946cd407374199809433f933c26288d81295b5967446b597913ffbf05b4b6ab0585bb0a4d3154d4ab998e5cc693bc969ccdd31291c341ceae6ae", 0x75, 0x10, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(r3, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=@ipv4_newroute={0x124, 0x18, 0x4, 0x70bd25, 0x25dfdbff, {0x2, 0x0, 0x10, 0x4, 0xfd, 0x4, 0xfd, 0xa, 0x800}, [@RTA_METRICS={0x95, 0x8, 0x0, 0x1, "e7f0974c1f23858e128e23dc9794b3a46d4d8767ffb92e637f65aaea3a0bae929b74c4073f943053ec992ac04876229f796336dc6a663f9416a0bfeaedb7f1b3fb3884f951e991a84381c3d61c1967ad2ec19f0c48d643d59d6e176a0d56751c69af872d7b98d4639a0fb43b9985c6276562409528532fe5e2383650074e012bd3a17f1e2173d4a08a1a64f9d0bc49e590"}, @RTA_UID={0x8, 0x19, r4}, @RTA_UID={0x8, 0x19, r5}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_IIF={0x8, 0x6, 0x4}}, @RTA_SRC={0x8, 0x2, @private=0xa010100}, @RTA_GATEWAY={0x8, 0x5, @local}, @RTA_METRICS={0x42, 0x8, 0x0, 0x1, "e6dc9f6d95d4deb3227dbc7033112e132e70dd35f72e4a50d3d8048d418bc54abd83286af271d2bf48d19e1e626c169e83e79f2afe3093f7423057932024"}]}, 0x124}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 01:56:01 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}}, 0xd82) [ 2335.231904][ C0] ===================================================== [ 2335.239281][ C0] BUG: KMSAN: uninit-value in mptcp_incoming_options+0xc93/0x3a80 [ 2335.247444][ C0] mptcp_incoming_options+0xc93/0x3a80 [ 2335.253215][ C0] tcp_data_queue+0xb4/0x7f20 [ 2335.258051][ C0] tcp_rcv_established+0x1132/0x2600 [ 2335.263582][ C0] tcp_v4_do_rcv+0x8a8/0xff0 [ 2335.268373][ C0] tcp_v4_rcv+0x4ce0/0x51a0 [ 2335.273149][ C0] ip_protocol_deliver_rcu+0x264/0x1300 [ 2335.278912][ C0] ip_local_deliver_finish+0x2b8/0x440 [ 2335.284691][ C0] ip_local_deliver+0x21f/0x490 [ 2335.289825][ C0] ip_rcv+0x476/0x770 [ 2335.293994][ C0] __netif_receive_skb+0x1a6/0x5a0 [ 2335.299306][ C0] process_backlog+0x480/0x8b0 [ 2335.304345][ C0] __napi_poll+0xe3/0x970 [ 2335.308872][ C0] net_rx_action+0x884/0x16d0 [ 2335.313810][ C0] __do_softirq+0x1b7/0x7c3 [ 2335.318530][ C0] do_softirq+0x9a/0xf0 [ 2335.322935][ C0] __local_bh_enable_ip+0x99/0xa0 [ 2335.328164][ C0] __dev_queue_xmit+0x24ff/0x5130 [ 2335.333418][ C0] ip_finish_output2+0x14be/0x1b40 [ 2335.338709][ C0] __ip_finish_output+0x266/0x720 [ 2335.343971][ C0] ip_finish_output+0x4b/0x550 [ 2335.348957][ C0] ip_output+0x15f/0x3e0 [ 2335.353470][ C0] __ip_queue_xmit+0x1c02/0x1e00 [ 2335.358620][ C0] ip_queue_xmit+0x60/0x80 [ 2335.363318][ C0] __tcp_transmit_skb+0x3b26/0x4c40 [ 2335.368704][ C0] tcp_write_xmit+0x3e0f/0x8940 [ 2335.373816][ C0] __tcp_push_pending_frames+0xc4/0x380 [ 2335.379611][ C0] tcp_push+0x755/0x7a0 [ 2335.383949][ C0] __mptcp_push_pending+0x8bc/0xde0 [ 2335.389350][ C0] mptcp_sendmsg+0x1e90/0x2300 [ 2335.394366][ C0] inet_sendmsg+0x105/0x190 [ 2335.399025][ C0] __sys_sendto+0x781/0xa30 [ 2335.403791][ C0] __x64_sys_sendto+0x125/0x1c0 [ 2335.408838][ C0] do_syscall_64+0x44/0x110 [ 2335.413588][ C0] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2335.419747][ C0] [ 2335.422167][ C0] Uninit was stored to memory at: [ 2335.427458][ C0] mptcp_get_options+0x2d86/0x2e60 [ 2335.432851][ C0] mptcp_incoming_options+0x124/0x3a80 [ 2335.438510][ C0] tcp_data_queue+0xb4/0x7f20 [ 2335.443418][ C0] tcp_rcv_established+0x1132/0x2600 [ 2335.448878][ C0] tcp_v4_do_rcv+0x8a8/0xff0 [ 2335.453774][ C0] tcp_v4_rcv+0x4ce0/0x51a0 [ 2335.458451][ C0] ip_protocol_deliver_rcu+0x264/0x1300 [ 2335.464366][ C0] ip_local_deliver_finish+0x2b8/0x440 [ 2335.470116][ C0] ip_local_deliver+0x21f/0x490 [ 2335.475227][ C0] ip_rcv+0x476/0x770 [ 2335.479382][ C0] __netif_receive_skb+0x1a6/0x5a0 [ 2335.484800][ C0] process_backlog+0x480/0x8b0 [ 2335.489863][ C0] __napi_poll+0xe3/0x970 [ 2335.494393][ C0] net_rx_action+0x884/0x16d0 [ 2335.499281][ C0] __do_softirq+0x1b7/0x7c3 [ 2335.504172][ C0] [ 2335.506591][ C0] Local variable mp_opt created at: [ 2335.511952][ C0] mptcp_incoming_options+0x9b/0x3a80 [ 2335.517533][ C0] tcp_data_queue+0xb4/0x7f20 [ 2335.522491][ C0] [ 2335.524901][ C0] CPU: 0 PID: 11217 Comm: syz-executor.1 Not tainted 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 [ 2335.535631][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2335.545913][ C0] ===================================================== [ 2335.553273][ C0] Disabling lock debugging due to kernel taint [ 2335.559724][ C0] Kernel panic - not syncing: kmsan.panic set ... [ 2335.566263][ C0] CPU: 0 PID: 11217 Comm: syz-executor.1 Tainted: G B 6.7.0-rc3-syzkaller-00024-g18d46e76d7c2 #0 01:56:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x1200, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0xfffffffffffffff9, 0x1, {{0x0, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) [ 2335.578345][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2335.588550][ C0] Call Trace: [ 2335.591947][ C0] [ 2335.594903][ C0] dump_stack_lvl+0x1bf/0x240 [ 2335.599783][ C0] dump_stack+0x1e/0x20 [ 2335.604107][ C0] panic+0x4de/0xc90 [ 2335.608218][ C0] ? add_taint+0x108/0x1a0 [ 2335.612908][ C0] kmsan_report+0x2d0/0x2d0 [ 2335.617645][ C0] ? __update_load_avg_cfs_rq+0x121/0x10e0 [ 2335.623624][ C0] ? __msan_warning+0x96/0x110 [ 2335.628822][ C0] ? mptcp_incoming_options+0xc93/0x3a80 [ 2335.634662][ C0] ? tcp_data_queue+0xb4/0x7f20 [ 2335.639668][ C0] ? tcp_rcv_established+0x1132/0x2600 [ 2335.645312][ C0] ? tcp_v4_do_rcv+0x8a8/0xff0 [ 2335.650240][ C0] ? tcp_v4_rcv+0x4ce0/0x51a0 [ 2335.655081][ C0] ? ip_protocol_deliver_rcu+0x264/0x1300 [ 2335.661091][ C0] ? ip_local_deliver_finish+0x2b8/0x440 [ 2335.666917][ C0] ? ip_local_deliver+0x21f/0x490 [ 2335.672123][ C0] ? ip_rcv+0x476/0x770 [ 2335.676442][ C0] ? __netif_receive_skb+0x1a6/0x5a0 [ 2335.681900][ C0] ? process_backlog+0x480/0x8b0 [ 2335.687015][ C0] ? __napi_poll+0xe3/0x970 [ 2335.691689][ C0] ? net_rx_action+0x884/0x16d0 [ 2335.696710][ C0] ? __do_softirq+0x1b7/0x7c3 [ 2335.701580][ C0] ? do_softirq+0x9a/0xf0 [ 2335.706116][ C0] ? __local_bh_enable_ip+0x99/0xa0 [ 2335.711494][ C0] ? __dev_queue_xmit+0x24ff/0x5130 [ 2335.716834][ C0] ? ip_finish_output2+0x14be/0x1b40 [ 2335.722265][ C0] ? __ip_finish_output+0x266/0x720 [ 2335.727604][ C0] ? ip_finish_output+0x4b/0x550 [ 2335.732739][ C0] ? ip_output+0x15f/0x3e0 [ 2335.737335][ C0] ? __ip_queue_xmit+0x1c02/0x1e00 [ 2335.742637][ C0] ? ip_queue_xmit+0x60/0x80 [ 2335.747500][ C0] ? __tcp_transmit_skb+0x3b26/0x4c40 [ 2335.753034][ C0] ? tcp_write_xmit+0x3e0f/0x8940 [ 2335.758225][ C0] ? __tcp_push_pending_frames+0xc4/0x380 [ 2335.764105][ C0] ? tcp_push+0x755/0x7a0 [ 2335.768590][ C0] ? __mptcp_push_pending+0x8bc/0xde0 [ 2335.774128][ C0] ? mptcp_sendmsg+0x1e90/0x2300 [ 2335.779233][ C0] ? inet_sendmsg+0x105/0x190 [ 2335.784054][ C0] ? __sys_sendto+0x781/0xa30 [ 2335.788902][ C0] ? __x64_sys_sendto+0x125/0x1c0 [ 2335.794091][ C0] ? do_syscall_64+0x44/0x110 [ 2335.798912][ C0] ? entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2335.805173][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2335.811177][ C0] __msan_warning+0x96/0x110 [ 2335.815943][ C0] mptcp_incoming_options+0xc93/0x3a80 [ 2335.821603][ C0] ? tcp_data_queue+0x40/0x7f20 [ 2335.826607][ C0] ? filter_irq_stacks+0x60/0x1a0 [ 2335.831822][ C0] tcp_data_queue+0xb4/0x7f20 [ 2335.836681][ C0] ? ktime_get+0x37d/0x460 [ 2335.841250][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2335.847295][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2335.853291][ C0] tcp_rcv_established+0x1132/0x2600 [ 2335.858749][ C0] ? ipv4_dst_check+0x12c/0x1a0 [ 2335.863806][ C0] ? neigh_release+0xb0/0xb0 [ 2335.868608][ C0] tcp_v4_do_rcv+0x8a8/0xff0 [ 2335.873381][ C0] tcp_v4_rcv+0x4ce0/0x51a0 [ 2335.878115][ C0] ? tcp_filter+0xa0/0xa0 [ 2335.882608][ C0] ip_protocol_deliver_rcu+0x264/0x1300 [ 2335.888457][ C0] ip_local_deliver_finish+0x2b8/0x440 [ 2335.894117][ C0] ip_local_deliver+0x21f/0x490 [ 2335.899162][ C0] ? ip_local_deliver+0x490/0x490 [ 2335.904369][ C0] ? ip_protocol_deliver_rcu+0x1300/0x1300 [ 2335.910362][ C0] ip_rcv+0x476/0x770 [ 2335.914512][ C0] ? ip_rcv_core+0x16b0/0x16b0 [ 2335.919464][ C0] __netif_receive_skb+0x1a6/0x5a0 [ 2335.924758][ C0] ? ip_local_deliver_finish+0x440/0x440 [ 2335.930579][ C0] process_backlog+0x480/0x8b0 [ 2335.935530][ C0] ? trigger_rx_softirq+0x40/0x40 [ 2335.940734][ C0] __napi_poll+0xe3/0x970 [ 2335.945240][ C0] net_rx_action+0x884/0x16d0 [ 2335.950108][ C0] ? net_tx_action+0x950/0x950 [ 2335.955044][ C0] __do_softirq+0x1b7/0x7c3 [ 2335.959751][ C0] do_softirq+0x9a/0xf0 [ 2335.964084][ C0] [ 2335.967093][ C0] [ 2335.970110][ C0] __local_bh_enable_ip+0x99/0xa0 [ 2335.975323][ C0] __dev_queue_xmit+0x24ff/0x5130 [ 2335.980493][ C0] ? __dev_queue_xmit+0x34b/0x5130 [ 2335.985740][ C0] ? filter_irq_stacks+0x60/0x1a0 [ 2335.990949][ C0] ip_finish_output2+0x14be/0x1b40 [ 2335.996236][ C0] __ip_finish_output+0x266/0x720 [ 2336.001422][ C0] ip_finish_output+0x4b/0x550 [ 2336.006386][ C0] ? __rcu_read_unlock+0x47/0xd0 [ 2336.011505][ C0] ip_output+0x15f/0x3e0 [ 2336.015934][ C0] ? ip_mc_finish_output+0x820/0x820 [ 2336.021409][ C0] ? ip_finish_output+0x550/0x550 [ 2336.026620][ C0] __ip_queue_xmit+0x1c02/0x1e00 [ 2336.031780][ C0] ip_queue_xmit+0x60/0x80 [ 2336.036378][ C0] ? __ip_queue_xmit+0x1e00/0x1e00 [ 2336.041686][ C0] __tcp_transmit_skb+0x3b26/0x4c40 [ 2336.047108][ C0] tcp_write_xmit+0x3e0f/0x8940 [ 2336.052139][ C0] ? filter_irq_stacks+0x164/0x1a0 [ 2336.057621][ C0] __tcp_push_pending_frames+0xc4/0x380 [ 2336.063331][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2336.069332][ C0] tcp_push+0x755/0x7a0 [ 2336.073669][ C0] __mptcp_push_pending+0x8bc/0xde0 [ 2336.079061][ C0] mptcp_sendmsg+0x1e90/0x2300 [ 2336.084046][ C0] ? mptcp_shutdown+0x410/0x410 [ 2336.089067][ C0] inet_sendmsg+0x105/0x190 [ 2336.093722][ C0] ? inet_send_prepare+0x5c0/0x5c0 [ 2336.098987][ C0] __sys_sendto+0x781/0xa30 [ 2336.103663][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2336.109676][ C0] ? xfd_validate_state+0x89/0x210 [ 2336.114999][ C0] __x64_sys_sendto+0x125/0x1c0 [ 2336.120030][ C0] do_syscall_64+0x44/0x110 [ 2336.124680][ C0] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 2336.130730][ C0] RIP: 0033:0x7f7958c7cae9 [ 2336.135255][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2336.155047][ C0] RSP: 002b:00007f795991f0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 2336.163648][ C0] RAX: ffffffffffffffda RBX: 00007f7958d9bf80 RCX: 00007f7958c7cae9 [ 2336.171853][ C0] RDX: 000000000000003c RSI: 0000000020000140 RDI: 0000000000000005 [ 2336.180918][ C0] RBP: 00007f7958cc847a R08: 0000000020000180 R09: 0000000000000010 [ 2336.189014][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2336.197110][ C0] R13: 000000000000000b R14: 00007f7958d9bf80 R15: 00007f7958ebfa48 [ 2336.205316][ C0] [ 2336.208643][ C0] Kernel Offset: disabled [ 2336.213012][ C0] Rebooting in 86400 seconds..