020b26a3335a5d11ab80ac4de6313fae18ff5762858bafa0d0dfcec5ef", "278c64de3f9a40895e1aaee76ea1a6ca6032e72ebaf6d600a85136f1c55f38db", "027879be41a2d72260cb045f754b4e3e41c87ae671359f895738adbed2e1c1e0", "5fef8972220e7a74009f451c0c9535db08584bae3484dd31df3353266a6b6196", "5fcdf58830cf55ad1027b8f415263ad72ad46d1d03e3ed0e83d5706b252e6906", "ebbfdd430bc43254510ee2ff"}}) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x1402, 0x8, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040004) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) splice(r2, &(0x7f0000000200)=0x4f, 0xffffffffffffffff, &(0x7f00000002c0)=0x100000000, 0x4, 0x2) 03:20:29 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000010001fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00'], 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0x0, 0x0) 03:20:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x5865}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) [ 935.405109][ T7901] IPVS: ftp: loaded support on port[0] = 21 03:20:29 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = socket(0xa, 0x2, 0x0) r2 = socket(0xa, 0x1, 0x0) close(r2) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000680)={r4}, &(0x7f00000006c0)=0xc) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000080)={r4, 0x81, 0x10, 0x2}, &(0x7f0000000180)=0x18) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r4, &(0x7f0000000100)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r5, 0x110, 0x2, &(0x7f0000000040)='cgroup.controllers\x00', 0x13) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="110700000000000000000500000008000300", @ANYRES32=r9, @ANYBLOB="a211029ac568085a99000f4fe0b18ad2cb0e"], 0x1c}}, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x100000001) ioctl(r5, 0x2, &(0x7f0000000140)="801659de3a8dbb127b2d4ba32e6a70150c2e63d251b171a57af5f8ae4c7706a2b2217f0ca3b6338137db1c6c545044f6c2fe3c") [ 935.515610][ T9305] tipc: TX() has been purged, node left! 03:20:29 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x11}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:20:29 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa283002020020009000000001d85680c1ba3a20400ff6e280000005e00ff39e38e0d0857aa99b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15ab", 0x4c}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f00000004c0)={0x0, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e20, @rand_addr=0xcd}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x58, 0x0, 0x0, 0x0, 0x80, &(0x7f00000003c0)='veth0_vlan\x00', 0x30, 0xd95, 0x4}) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000340)=ANY=[@ANYBLOB="8a8a88e9f1075bf4a3d47cc36c804c5172d2501a27f470f7a55ea602abab2625c98b597ec355410d05fed7e407dbce38843eafc4355ca9251a8779fcb97f62e4331668b0942d37b700"/86], 0x2) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000240)={0x6, 'macsec0\x00', {0x8}, 0xfff}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000006c0012800b000100697036746e6c00005c000280060011004e240000060010000700000014000200fe800000000000000000001800000000060012004e2300000800140000040000050009000400000008000800380000001400030000000000000000000000ffffe000000208000a00", @ANYRES32=0x0, @ANYBLOB], 0x94}}, 0x4000) 03:20:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x6000}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) [ 935.775513][ T7980] validate_nla: 17 callbacks suppressed [ 935.775524][ T7980] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 936.475673][ T26] audit: type=1804 audit(1586748030.129:679): pid=7977 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir055243180/syzkaller.BBU39k/703/cgroup.controllers" dev="sda1" ino=16104 res=1 [ 936.503622][ T26] audit: type=1804 audit(1586748030.129:680): pid=7984 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir055243180/syzkaller.BBU39k/703/cgroup.controllers" dev="sda1" ino=16104 res=1 [ 936.587115][ T26] audit: type=1804 audit(1586748030.239:681): pid=7965 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir055243180/syzkaller.BBU39k/703/cgroup.controllers" dev="sda1" ino=16104 res=1 03:20:32 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl(r1, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x0, 0x0) setsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000a80)="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", 0x1000) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x3a, &(0x7f0000000380)=[{&(0x7f00000003c0)="339a", 0x2d05}], 0x1}, 0x350c) 03:20:32 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0xa00}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:20:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x6558}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) 03:20:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000080)=0x1, 0x4) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ppp\x00', 0x44, 0x0) ioctl$PPPIOCSCOMPRESS(r6, 0x4010744d) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000000)=ANY=[], 0xfffffecc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0xe0, 0x9, 0x6, 0x101, 0x0, 0x0, {0xc, 0x0, 0xa}, [@IPSET_ATTR_ADT={0x80, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x3800000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x2}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xffff}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x40}}]}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x971}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000010) ioctl$NS_GET_NSTYPE(r7, 0xb703, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r5, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b203000000004f707f6debceabb54c744f336b43134d76ad2b49faf4a01853b2632c6f20008d32282d0f56d4d3e960a24bdafa91d17f6fd686d4cccaca"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="602600002800000300"/20, @ANYRES32=r5, @ANYBLOB="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"], 0x2660}, 0x1, 0x0, 0x0, 0x8180}, 0x0) 03:20:32 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) r2 = accept$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x1c) ioctl(r2, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0x100000001) r5 = socket$xdp(0x2c, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r7, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x8000) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000880)={&(0x7f0000001000)=""/102400, 0x120000, 0x1000}, 0x20) 03:20:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xb) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000019c0)={0x7, 0x3, 0x0, 0x3}, 0x8) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) setsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000001740)=@int=0x3, 0x4) bind$rxrpc(r2, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) r6 = accept$netrom(0xffffffffffffffff, &(0x7f0000001a00)={{0x3, @null}, [@remote, @default, @rose, @bcast, @default, @bcast, @null]}, &(0x7f0000001a80)=0xfffffffffffffef2) ioctl$sock_inet_SIOCSIFBRDADDR(r6, 0x891a, &(0x7f0000001ac0)={'netpci0\x00', {0x2, 0x4c26, @empty}}) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000300)=@add_del={0x2, &(0x7f00000002c0)='vlan0\x00'}) bind$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) write$binfmt_elf32(r4, &(0x7f0000001780)=ANY=[@ANYBLOB="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"/570], 0x23a) writev(r2, &(0x7f0000001680)=[{&(0x7f0000000000)="13f5b2dcd5a17151d58052f31299ea0d594d8116157a88fe9269bc6847d86aad4bcff1ab9457b8accc21e05a37a45166abcff08d78b196b1b333ea9b5a32b74bc76edb671320d2ddd0ae28d08957e6f4f9e9edf222d18a023097c557221737199651a4e8fdb76323426da918495fa23f9462116ce63b7b5c537ec91e817695252b914914de4159c4ff0ec7c8395026a7e0102cf61ab603de91c8bfba80b59be32010d0fb9349ea30bfa359", 0xab}, {&(0x7f00000000c0)="13efe322a5dd4431a4b715b62ac2a9b8673b97666929e6ca60fafd2f53dcb4a1029b2891c784a59961827dece74bdf72883f245e5c7de0df8781aab5979faa8cfaa743471cf7a1275b55ea44885dd5ec512d96f2c62d55766f0c9cb351b781d2aab7ea909fe3f4b9fbe3f53de91791d6829ea895cfb3d99a357bddce53d6913cf606a152c3917c2a02e9691073aa8ba9c934", 0x92}, {&(0x7f0000001c80)="fd4b69c1a6a35deb3318f0e6b7eda7cbac374c237a9ca92bcf16963ac47aa866440b3c974309c64189e59db272a35c086d345819b6b3caa53128ab222a131891092d7ba2c6d7ff8a532908454d45b85496db80c3f3fdc32cb888451684db2897c36b772d84ade80bcc15ac9007e2337a6a5fee836a3ad12801ea3404c935d63bf806e0904b9689d02fd645b21dd020bd703a9efa586e96867bf8a3b6ff7614baf5bc0db29ec7fa65547ee4fdeb598814900f1219", 0xb4}, {&(0x7f0000000200)="d3d1285ca09a0cb0a8a30aef032cebb7dbd93e37aea5c78e2c98d16f1be905022626b79e37ac1ebeba24d63d1e1b216e47588d191be25c80adbf14dcdafd6468b24e1a22254d74c83274e2593aaf9c00c82d", 0x52}, {&(0x7f0000000340)="6e30024f2f5a555a5a434e805936028f775069466030624b9bfaada084a04da89df8fbee9d3d6900a39411fcbe7bbe943b2aadc52f8861504afd4194089cc4ed04e5d79325ddd67a11cef903a609bac32d55faa2f0f00e380fbb6c9e94cca908f3548951674dc25e227d96d6fdefe737933779f8d28d76269d018b7611ffa197270ca38053416582cfdff89b3d1611c00e", 0x91}, {&(0x7f0000000400)="dcf2b1332083ffdf9a5a39fc7afe85dc832e0c34597ed7275b6e34e8db7d2147cf10c4adfdc3a722ce657246d159b009c0c89c03f2100e5cb81e70db66bb7eb8ef4189d756806c6c500c81ff31aa4d1296d97840ba43b236ccfd277a9d5f4968f89e87641921c3c52f2efaa9a6f82a5fd21f6f53e2f2e31cc0ce4002e759748aac0546a787f03515aeafac729b1304bafee2020c02868a4c83785a498c9236e5052f13eb9f4c2ae0b09715f30f18f9009cc1c55857eb50052684c6c6d66ef64b3eb0879faf0e4fa500f1737b69d1b3e5d608e0f4effc63374bcb18cc838ffeb4207ee3fc229c25fd1a", 0xe9}, {&(0x7f0000001b00)="7a9dfebb82b82a2998405d93e34557bb4ddbd649b17bed88ade2f889a46a92b387c6c4e5c55cb5a530e3afb868d070bed7a3955147fa5c90e14289a43c07ff3cca0ff88ca6bd942fe8ceecb40c02693c7ca794a90fa058e8997ce13e32fed18d9febf2781bf670ac8678eef38d3ce145ed06e765f3c38076466442cea48b1607b4a906b4b0", 0x85}, {&(0x7f0000000580)="2574d9770bb72afb6cf594ee8bcf94b657a0cd6ac1229c3f99cdbd5bf87de5c975860d5b1c2130ac8a175bcc4ce759905acd29903c001e2d71cde3d99c933ca50c40f5f9e109105008fe78fbd2bd6368d74b6de3f5fb74f557b37d1ecd1635f7d8bd26a5940ae2e3fe8ea8db0381eaccd217141638547cee9c9de7d79973b6c57e7e9bf1897f86913399e378d99c67a927632e44e4097426dad56630a7325ca0256ffb2787f6ff57a7e69e935e2ebf098269b4d6d395c4609c82448411d9641261f4fd9509587e0e78198793243e93744408ca", 0xd3}, {&(0x7f0000000680)="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", 0x1000}], 0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@ipv4={[], [], @empty}, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) [ 938.603468][ T8021] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 03:20:32 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0xf, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:20:32 executing program 1: socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socket$inet6(0xa, 0x80002, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[]}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000180)='wireguard\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) write$binfmt_elf32(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f4500ae00295db000043a800002000600ff0100002700100038000000b600ff00536301000400ff030200000000003300000000d202217115c366f4079f213d746a7bc33cee950000a02200000be86c3ebae2704632dc680456d1da77f3d1"], 0x72) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x206, 0x10000}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OKEY={0x8, 0x5, 0xf3ef}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x8001}]}}}]}, 0x50}}, 0x0) [ 938.703854][ T8028] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 938.717902][ T8032] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 938.736238][ T8028] netlink: 'syz-executor.2': attribute type 27 has an invalid length. 03:20:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x8100}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) [ 938.777496][ T8028] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 938.791670][ T26] audit: type=1804 audit(1586748032.449:682): pid=8022 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir055243180/syzkaller.BBU39k/704/cgroup.controllers" dev="sda1" ino=16379 res=1 03:20:32 executing program 2: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100), 0x4) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 938.870379][ T8032] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 03:20:32 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) [ 939.069588][ T26] audit: type=1804 audit(1586748032.719:683): pid=8041 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir055243180/syzkaller.BBU39k/704/cgroup.controllers" dev="sda1" ino=16379 res=1 [ 939.159596][ T26] audit: type=1804 audit(1586748032.719:684): pid=8022 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir055243180/syzkaller.BBU39k/704/cgroup.controllers" dev="sda1" ino=16379 res=1 03:20:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xf000}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) 03:20:32 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="1d5a1745a86da49d24518dabbea1"], 0x3ff800) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x100000002, 0x0, 0x0, [0x6000000]}) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000240)=ANY=[@ANYBLOB="00000000000000000500000200000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000983aa9d8ed491d5702a854f9985e73945fb5102e460d0ba4d8c32fb9470bac81491536e9dcdc193f7c8419b3cb49bb75e91b2d498eb733e05e4106cb3825d8701094f0cc"]) 03:20:32 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x3, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) [ 939.386758][ T8085] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 03:20:33 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) getsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000640), &(0x7f0000000680)=0x4) sendmsg$sock(r0, &(0x7f00000006c0)={&(0x7f0000000440)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x80, &(0x7f0000000540)=[{&(0x7f00000004c0)="211a6e54fc010091f64b58a4ddeb591e5a01b4cbaa666ddcc8787b2cd9a06ea1108dce0c2e7b2195763c2bc5eb83435b45b7ca1c45b33b6edb2a8741421932d16ee170c0263c89245540b03c74e2614fd770deae98d0ed8abcd89d8a77e1ab028dd57f6279", 0x3}], 0x1, &(0x7f0000000580)=[@mark={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @mark={{0x14, 0x1, 0x24, 0xa890}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x60}, 0x20000040) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x30, r2, 0x3232a000) syz_emit_ethernet(0x42e, &(0x7f0000000700)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd60a4f00803f83afffe8000100000000000000d08000000aaff02000000000000000000000000000186009078000000000000000000000000000ba78ce540cd4f791153d5dea6b259fe8000000000000023493b87aa0568f00b1c71a8242373244ad2439adc07df0a69748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c11b37adac15084dbaf736b41e5a803721d001684f0da52ef24571313968050378ee824f4dffba7feed320557f7671975afc9c545c5ea6137c8ce680ba2d2e8794cc0ee661ab31313a50f67f637326bdc20eee126a2c281295ae9405b24d13dc48b7b6aa26e8a94498418f3472f7281922377d30a3b5ed2c6a2991e5ea6b275c1d5bddf59f3d1843df268e8c825c6b2cff208dfb5cd8283d0dcd52a6de228bf697d3d6506afec30ef7e07413c7afc1eb139e0fb1a5a643b4099519e31f3fd4457f0e6d586ad05e1005a062bf7af428060d01a1cfcfad88ef4512c6ef5c0ead4b9cc87484b106a060a9899d50f595204418f51e914c88c29078a5457de6a262cadf02b071d88e61703f037caded0b315701274012fa532ddd69499074e1a2df196e0afcffda08fb3d82ab8160253a47d3efc3d7cead55c28610ae20f69aaced0a1a6ce815344cf8d0bc8a0dfcdd1e8cd7242601777ec653c2d4b704397dcb1350982afd017eaa630c840d71589499fd68239ae0c0aa2fc9b949d1a716d40a24f078e92e8c268ff726290944b5f3a3bea9559f2d2a51405fba224411ecc49544dea47917a98bf79c3bfeed70429abf70a52ecbda21c9bf0f6a70cd2c2c887391e4095ad22b437c60abf829447b47bd231ca2a98d9da7519a4bd28e803fa000fafc0dc453ed56cdf4356d7abcfec4eed0b94a4f78ce44a7177c6684026ba4f26a17e52e326c8bb7be5e2ea5780d7169d8f4ff62cb2b223f1d6221f62e0ee0244d86042560edd36853c464b23be536c65b87cd5ea60932ed90607b369ed2017f645afcb5cd07f6896a08473bd5dea2bfb52ac501a39c338eda985aa4a7755db876cbe4d944f3cce0079d2ad9ba8d17f01a614052aadbd4af0fd282f594dc4530ee49b6c9ae6d5d80a073e678594be2e2f0869baa2a58dd2d0f6a995fb706c4d1b618d57da1c2d8f55611f746105a947b4f6bb74dbdbffb1b3c1f2316f6a28a07f0145b1bf8345b6aa4e9d5a819497856792121219ea151c1f8e2f8635b6afa08687e6e751803865165eac0c34bdddae1bbe52f55d08cc4a0865f8df372635e8a26ac4ac9716a124ac4e83349f17b612e2b1893b5eaccecc7d812bb4f4fc6b313f57c2035a90f782a4a97b5f5309b6c5798d72b9187f3d411e84041e3671fe35e39fa1887846721c38d501b471990b919d2ad9ca9bc71157a843d75838c1aa4ff0dabd74284709f1f87f324ec4f56eacd70e6bb5e9c3ff719786c4d400100000c828e0465ca168d04de1930f420564b66f91dc8c5fe83f128f91f739c747b355744a7c608ff0c4b89e012edc87ae3bdeca4f58a826d9faa5c4b0306f342a0ac80460557e43000000000000000000"], 0x0) 03:20:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) 03:20:33 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) getsockopt$packet_int(r1, 0x107, 0x3, &(0x7f0000000000), &(0x7f00000000c0)=0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r2 = socket$netlink(0x10, 0x3, 0x8) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e22, @broadcast}, 0x10) r3 = socket$netlink(0x10, 0x3, 0xe) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r0, &(0x7f00000021c0)=ANY=[@ANYBLOB="09000000000028000000609eef7b00603a00fe800000000000000000000000000000ff020051a33654000000000000000000000000010300907800000000606595c300000000ff02000000000000000080000000000100000000000000000000000000000001110000000000000000010000000000006c000000000000004011c6ed3ec831c0a859df4fd6a1cf59a90c42b4"], 0x92) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000000)={'rose0\x00', 0x600}) ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0) 03:20:33 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x14, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) [ 939.585304][ T8094] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 939.696994][ T8105] netlink: 'syz-executor.1': attribute type 27 has an invalid length. 03:20:33 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1, 0xfd}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) 03:20:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) 03:20:33 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x19, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:20:33 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@allocspi={0xf8, 0x16, 0x317, 0x0, 0x0, {{{@in6=@loopback, @in=@multicast1}, {@in6=@mcast2, 0x0, 0x32}, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, {}, {}, {0x0, 0x0, 0x4}}, 0x0, 0xffffffff}}, 0xf8}}, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000180)) r2 = socket(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x4, 0x1, 0x5, 0x0, 0x0, {0x0, 0x0, 0xa}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x853764720732c1f4) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000000)={'macvlan0\x00', {0x2, 0x4e20, @multicast1}}) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) r4 = socket$inet(0x2, 0x4, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f00000002c0)={r4, r1, 0x0, 0x57, &(0x7f00000001c0)="7765229eb9522090dbf75156521601a1f04644462eca6d2c9d9206b7b62b2c75988c942a274ec1ea007ac250ec24fd43c8531710631dd963489f775868cda8f88a07257d9b47f047958982cec81daad1af591cd92b630e", 0xc0, 0xbd, 0x901, 0x7, 0xfff, 0x2, 0xfffffffa, 'syz1\x00'}) 03:20:33 executing program 4: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x140a, 0x0, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x48080}, 0x10) r1 = socket(0x10, 0x80002, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f0000000180)) write(r2, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) ioctl$SIOCAX25OPTRT(r2, 0x89e7, &(0x7f0000000140)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x2, 0x88}) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000007380)=@newtaction={0x64, 0x30, 0x53b, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9, 0x1, 'vlan\x00'}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0x4}}}]}]}, 0x64}}, 0x0) [ 939.926158][ T8115] IPVS: ftp: loaded support on port[0] = 21 03:20:33 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000c60000001c0012000c000100626f6e640000e7570c000200080001f60500000076170754bfb1eb640f887431debd5a3f70fc2362b7c3b1e2210b8e048a337d25bab43e4073715dcfe546d467bc6e3e62f17262d2a5f738784e3fd9d3ae77"], 0x3c}}, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r3, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r3, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010003b0dfff300000010000000000000", @ANYRES32=0x0, @ANYRESDEC=r3, @ANYRESOCT=r2, @ANYBLOB="140012000b000100627269646765000004000200"], 0x5}}, 0x6000000) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="0000000000c6d3483b6d680bf6470187ba000000020000000f000000"], 0x28}}, 0x0) [ 940.722259][ T8138] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 03:20:34 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x28, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:20:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x2}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) [ 940.784975][ T8187] validate_nla: 9 callbacks suppressed [ 940.784985][ T8187] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 940.815820][ T8119] IPVS: ftp: loaded support on port[0] = 21 03:20:34 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x1a0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xebb, 0x10110}, [@IFLA_VF_PORTS={0x178, 0x18, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x8, 0x2, '%[]\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "8a5c85b5c7ba7b8f2b0c00020d521317"}, @IFLA_PORT_VF={0x8, 0x1, 0x8001}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_PROFILE={0xa, 0x2, 'cfhsi\x00'}, @IFLA_PORT_REQUEST={0x5}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "68ffabf7cbb2ccfc128f5cf3ffd9a504"}]}, {0x3c, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xb, 0x2, 'cgroup\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xc4}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "de2b8320074f26fd910e36045947b210"}, @IFLA_PORT_PROFILE={0x4}, @IFLA_PORT_PROFILE={0xa, 0x2, 'cfhsi\x00'}]}, {0x74, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x3}, @IFLA_PORT_VF={0x8, 0x1, 0x240}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "6681abed64b046c1ee186c02d6d4a252"}, @IFLA_PORT_VF={0x8, 0x1, 0x7ff}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "c90ea649e605138666efcae6546ecc98"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x3}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "437f11cda90fa0ca2f1f03056e8ebf5e"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "02c2e10e808b26780ea675e2e8d7eed3"}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x6}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "7b1b9b37b74c9e4b0ef78fd2a1006890"}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "41b488b407a8a12368853c30718b0047"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "dbee75ad7024887ad330b7bf6008870c"}]}, {0x14, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x81}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x2}]}]}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x7f}]}, 0x1a0}}, 0x0) 03:20:34 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x15, 0x1000, 0x4, 0x0, 0x47, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x40) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x200000, 0x0) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000180)={0xfffffffc, 0x1, 0x8001, 0x20, 0x81, 0xc248}) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10808}, 0x10) [ 941.142271][ T8223] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 941.190553][ T8224] netlink: 'syz-executor.2': attribute type 27 has an invalid length. 03:20:35 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'ip6_vti0\x00', 0x200}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @remote}, @timestamp}}}, 0x100c) 03:20:35 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0x0, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) [ 942.437852][ T9305] tipc: TX() has been purged, node left! 03:20:38 executing program 4: write(0xffffffffffffffff, &(0x7f0000000140)="240000004e001f", 0x7) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write(0xffffffffffffffff, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) r3 = socket(0xa, 0x2, 0x0) r4 = socket(0xa, 0x1, 0x0) close(r4) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000680)={r5}, &(0x7f00000006c0)=0xc) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000080)={r5, 0x81, 0x10, 0x2}, &(0x7f0000000180)=0x18) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={r5, 0x8}, &(0x7f0000000100)=0x8) socket(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r6, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r6, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) ioctl$sock_SIOCSIFBR(r6, 0x8941, &(0x7f0000000080)=@add_del={0x2, &(0x7f0000000040)='ipvlan1\x00'}) 03:20:38 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0xc0) r3 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r3, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r3, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xb0}}, 0x24) getpeername(r3, &(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f0000000140)=0xffffffffffffff5f) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) 03:20:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x3}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) 03:20:38 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xb, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:20:38 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'ip6_vti0\x00', 0x200}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000240)={@void, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @remote}, @timestamp}}}, 0x100c) 03:20:38 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000240)={0x30, r4, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x17, {0x0, 0x0, @l2={'ib', 0x3a, 'lo\x00'}}}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r4, 0x400, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040010}, 0x8000000) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000080)={'mangle\x00', 0xb, "30ef38f72c441d4c296f23"}, &(0x7f00000000c0)=0x2f) sendmmsg$inet(r0, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001940)="a5", 0x1}], 0x1, 0x0, 0x0, 0x1cb}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000600)="da", 0x1}], 0x1}}], 0x2, 0x4000000) 03:20:38 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0x11, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:20:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='pids.events\x00', 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x4}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000200)={r3, @in={{0x2, 0x4e21, @multicast1}}, 0x1, 0x0, 0x10001, 0x4, 0x3}, &(0x7f0000000140)=0x98) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f00000005c0)) r4 = accept4(0xffffffffffffffff, &(0x7f00000002c0)=@in={0x2, 0x0, @multicast1}, &(0x7f0000000080)=0x80, 0x800) r5 = socket(0x10, 0x4, 0x0) write(r5, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) r6 = socket(0xa, 0x2, 0x0) r7 = socket(0xa, 0x1, 0x0) close(r7) r8 = socket$inet(0x2, 0x4, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000680)={r9}, &(0x7f00000006c0)=0xc) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000080)={r9, 0x81, 0x10, 0x2}, &(0x7f0000000180)=0x18) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f0000000340)={r9, @in={{0x2, 0x4e20, @broadcast}}, 0xffffffc0, 0x6, 0xf7a2, 0x7ff, 0x80000000}, &(0x7f0000000400)=0x98) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000440)={r10, @in6={{0xa, 0x4e20, 0x3, @rand_addr="235667f98350b7002328dfe75a3c209e"}}, 0x9, 0x2, 0xfffffff7, 0x9, 0xaa, 0x8000, 0x40}, &(0x7f0000000500)=0x9c) [ 945.131977][ T8310] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 945.219563][ T8314] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 945.550584][ T8312] tipc: Enabling not permitted [ 945.563415][ T8312] tipc: Enabling of bearer rejected, failed to enable media 03:20:39 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) [ 945.598436][ T8314] netlink: 'syz-executor.2': attribute type 27 has an invalid length. 03:20:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) 03:20:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x4, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r1 = socket$rxrpc(0x21, 0x2, 0x2) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) bind$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0xd0b84b7ac18df0e4, {0x2, 0x0, @local}}, 0x24) r3 = accept(r2, &(0x7f0000005a40)=@in6={0xa, 0x0, 0x0, @dev}, &(0x7f0000005ac0)=0x80) getsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000005b00), &(0x7f0000005b40)=0x4) bind$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) write$binfmt_aout(r1, &(0x7f0000001340)={{0x107, 0x98, 0x1, 0x1ff, 0x39b, 0x6, 0x63, 0x4}, "8f2c101010e9a9a149cdd671b5955472aaa627a36b2b195ccfff9ea09e9bea2d5b1ad8061af9d92b400ca84d5b8ab3fa81d2f59af5", [[], [], [], []]}, 0x455) 03:20:39 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) r3 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r3, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) r4 = socket(0xa, 0x1, 0x0) close(r4) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000680)={r6}, &(0x7f00000006c0)=0xc) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={r6, 0x81, 0x10, 0x2}, &(0x7f0000000180)=0x18) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000700)={r6, 0x5a0, 0x20}, 0xc) bind$rxrpc(r3, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) sendto(r3, &(0x7f00000002c0)="7a1b8a14a4eee5337c0a244f9b92061ef75df4e58a6fe316e3ef8a4d4e82324096be24c412cc2a944e1a152848bfcbe00603ceaed4c50107cd7e85a619d86dd3ee704450", 0x44, 0x5c841, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000000)=""/91, 0x5b, 0x40010002, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e21}, 0x6e) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) setsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f0000000100)=0x6, 0x4) write$tun(r0, &(0x7f0000000180)={@void, @val={0x0, 0x0, 0xffff}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x24, 0x3c, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast2, {[@dstopts={0x0, 0x1, [], [@ra, @padn={0x1, 0x2, [0x2, 0x0]}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x56) 03:20:39 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x2, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) [ 945.930632][ T8346] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 03:20:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x5}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) [ 945.983908][ T8349] netlink: 'syz-executor.1': attribute type 27 has an invalid length. 03:20:39 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x3, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:20:39 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) bind$alg(r1, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="0000000725e8c5d716aa63af00009722541aa68e5886335ad49b7c569a02f2f05f3b2bb5be507c0080e133f427930ca99954293ebacacf1e7a8bbb3b0c44fb5e2810f8a5141ca1ce0c52feb4cf8c5493ccd1249c250ad5ab74d618215040a607e09d24efb1142a636f99d6e622b0708287997bb50000150507d7d8609339e43ea8a48ed2b7f36d6c1c14ef035036e84eeeac204382e9f9a617db17501904195d5ad6a4617d91d8c00a28356c3dc78e24f9c27dd3", 0xb4) r3 = accept$alg(r0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x4, r4, {}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffe0}]}}]}, 0x38}, 0x1, 0x1400}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)={0xa0, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKINFO_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKINFO_HEADER={0x4}]}, 0xa0}, 0x1, 0x0, 0x0, 0x810}, 0x800) r5 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r5, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) r6 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r6, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r6, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) write$binfmt_script(r6, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x112) bind$rxrpc(r5, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f00000000c0)={0x2, 'macvlan1\x00', {0x7fffffff}, 0x3}) sendmmsg(r3, &(0x7f0000007b40)=[{{&(0x7f0000000180)=@l2, 0x80, &(0x7f0000000240)=[{&(0x7f00000004c0)="40fa7789ec8d7ab2e427726846a4f3968a3be8d89e985cae50c6450dbfa188d0fd3221df319c8fc6318c6aa1a02941a3eebfe19ee80bb8fc066839f3b0b3f8e24be269701ca261ab87233319fc8dcf2867c747f8e517372947f3a3b89e313b556e85c3a7229dd1ebe2efc1b55dcdd5ba6992358b997feb3deb3d33b36e55d3e5a14f3b7b57128a18c80986ebb7799de38a7445058aa9c2ff313a53e1bcf26fbbbc6be7397c62f375a73313461ac13af27d1500402c01035b6a6bf973d52acecdf7516dd57cc5a20050967701d837ea13494090d48dba24741cb2a6cccfd1a0632288d978977a0a", 0xe7}], 0x1}}, {{&(0x7f0000007500)=@hci, 0x80, &(0x7f0000007680), 0x0, &(0x7f00000076c0)}}], 0x2, 0x0) [ 946.228358][ T8362] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 946.248506][ T8362] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 03:20:40 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) pwrite64(r1, &(0x7f0000000240)='\x00', 0x1, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000140)={0x20}) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x1}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000000) 03:20:40 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) r1 = socket(0x22, 0x3, 0x0) write(r1, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, r2, 0x300, 0x70bd26, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044}, 0x41) 03:20:40 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x4, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) [ 946.911147][ T8362] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 03:20:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x6}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) 03:20:40 executing program 5: syz_emit_ethernet(0x2e, &(0x7f0000000040)={@link_local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @broadcast=0xe0000001}, {0x0, 0x4e22, 0xc, 0x0, @gue={{0x3, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) ioctl$sock_x25_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={@remote={[], 0x1}, 0xf, 'veth0_to_batadv\x00'}) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000000)={'dummy0\x00', {0x2, 0x4e21, @local}}) socket(0x6, 0x1, 0x9) [ 947.046637][ T8388] netlink: 'syz-executor.1': attribute type 27 has an invalid length. 03:20:40 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000040), 0x12) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x7fffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000380), 0x10076) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f00000000c0)={0xc, r1, 0x2, 0x0, 0x0, 0xfffffffffffffffd}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000040), 0x12) r3 = socket(0x29, 0x3, 0x1) write(r3, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x7, r5, 0xf915ec8762bad1cd, 0x0, 0x0, {}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6}]}, 0x1c}}, 0x0) r6 = socket(0x10, 0x80002, 0x0) r7 = socket(0x8, 0xa, 0x0) bind(r7, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000002c00270d000000000000000000000400", @ANYRES32=r8, @ANYBLOB="00000000000000000f000000080b01007533320000020008000200e0ffffff00"], 0x38}, 0x1, 0x1400}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x40, r5, 0x800, 0x70bd29, 0x25df9bfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xd, 0x2}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0c4}, 0x0) getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000100)=0x4) [ 947.223815][ T8398] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 03:20:41 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'rose0\x00', 0x600}) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000540)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'rose0\x00', 0x600}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'netpci0\x00', 0x20}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="40010000100013070000000000000000e0000001000000000000000000000000ffffffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x140}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'veth1_vlan\x00', {0x7, 0x0, @loopback}}) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180)='NLBL_MGMT\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$RDS_CANCEL_SENT_TO(r6, 0x114, 0x1, &(0x7f00000002c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, r5, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr="bedc11b8ab99336a95014be9f8971f06"}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, 'vmnet1\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x74}, 0x1, 0x0, 0x0, 0x40050}, 0x481c) write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="000000943beb357abd6e4f8d86b11e85f101df8be641311df77314bb0d40907838d40000000000000000000000000000b8965008bf63b1684bf75794fc1aaa816d9ca13da9664928b41af8c56f575d55548f42267ba34fbd4339193b19f7e38afbcd7dbf6ecd2f8f9e34402f32a2647c3c1f349d8b6003bebd751edf8a6f7043260ee7a3f252b756a6ad39faf35a448edd5626bf1d7f034be5b79cef9b52e623371da534e3b8fcbef06c405e2fd32cad6c354b12f5e54339ecabb05507b6528b0c6b90e964343da495a62ab8f3cc7a911fb77c9f803e7cfe3192200e66ace2208fd2169adacfcef398cbfb7502"], 0x100c) [ 947.293810][ T8402] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 947.375439][ T8404] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 947.811412][ T8395] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 03:20:41 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x14, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:20:41 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ppp(0xffffffffffffff9c, &(0x7f0000001440)='/dev/ppp\x00', 0x400, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) connect$l2tp6(r0, &(0x7f0000001480)={0xa, 0x0, 0x1ff, @mcast2, 0x0, 0x1}, 0x20) close(r2) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_buf(r4, 0x0, 0x2e, &(0x7f0000001380)=""/85, &(0x7f0000001400)=0x55) write(r3, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f00000014c0), &(0x7f0000001500)=0x4) recvmsg$can_raw(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/154, 0x9a}, {&(0x7f0000000240)=""/229, 0xe5}, {&(0x7f0000000040)=""/104, 0x68}], 0x3, &(0x7f0000000340)=""/4096, 0x1000}, 0x20c0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 03:20:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x8}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) 03:20:41 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x1ff) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") close(r0) socket$kcm(0x29, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) getsockopt$nfc_llcp(r4, 0x118, 0x0, &(0x7f0000000140)=""/93, 0x5d) socket$unix(0x1, 0x5, 0x0) 03:20:41 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000640)=ANY=[@ANYBLOB="dd04001300000000000100050000000000000002000020000004010000000000000000b49f1cf4ce3aef2355b0806cbdf4c5bf405969379d7fe52d4061b8fa206f7385e135e3148cfda57c4a61cf56fed6d5dd30f2312d3040b01d5db563712f6941254c42e854936bf6da4d83a19afc3ccfc76dfa696f7e6f9b664133f5fce5ca95ef0001000013860fa22f29ca836ab489dbd82e64540309cf2a93b1699b09d7931a12b3ba1e44461ed99654e5239a7fd09b77ed6c913624d79f1e57ed24588b538184f5b6dae61c166f7124767ee8e664a12b438439a13e6782f481ad798ca1bf1e774f6e14c6569b281f685de86030b8756afb089fa1f703000000db125193ffb4fa8a539647515621690fcf13adda720a8d3e775879f86fe58d887e33c406000000000000000b69424d8abf5ab67e69be9fdb5dcf2b7f82f8ec2fa66265d000490b437120f2dfc31da73c56ee"], 0x28) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x400000000000064, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000800)={{{@in=@broadcast, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f0000000300)=0xe8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000280)={0x0, 0xf5a}, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) accept4(r4, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000000)) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)={0x6c, 0x24, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r2}, @generic="42f371930cd6f477606059929ef44b1096e78adc046572f8a9332389366a1fdd3948da85c7324cddf6edf31cdf4759a64903946f263e71cd08011cb5984da292943817f5ba274ff8ea452e45b8"]}, 0x6c}, 0x1, 0xffffff7f0e000000}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001680)={&(0x7f0000000980)=ANY=[@ANYBLOB="e40200002000040026bd7000fedbdfe392000000ff020000000000000000000000000001000000000000000000000000000000004e2100004e23ad77506a48aee7b28001000080202b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="48000100626c616b6532732d3136302d67656e65726963000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002c0017000400000025bd700025bd700026bd700025bd700000000080ffffffff04000000010400002000000008000b0008000000e400060000000000000000000000000000000001ac1e01010000000000000000000000004e2300034e2201000a0020005c000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000ef000000000000000000000000000004d43200000000000000000008000000ffff000000070200000000000000ff0f00000000000001800000000000008809000000000000e5090000000000000600000000000000030000000000000000100000000010000080000000000000000000000080000005000000000000000100000000a73c0000000200000006000000200000002abd70000000000002000300f10000000000000037010100726d64323536000000000000000000000000000000000000000000000000000000000015000000000000001d00000000000000000000000000000000000000007807de3169f835cc1b08d698204ed9aba4afee38f599f6499954438b544f9b25af941bf4ea0b938f62d3f641bd30315810bd88c680eaf1a09797c7785e77d16aa8f29f5195e485e793b5fe3307735aeb80d5d95a3a6c82af06f7aa639caa16f8869df7f73bd4c8219bae5fdac4d8e3ed4afa1f35b89ce4cac2083f0b25998b4813ae480ea42e5af167cff85f559b0dbb407070efdc88ed763c16939f3cb2d2b3ebf4aa260a6693638930045e05454d91dc8a02ace2675aa652fcd729b4e4a4499b4109051922c30b58db9ec75bd775c38eecaf8ce05c8658f06792a86a228be20b560247a60e31a6735b5d4c1952dbfe7fc4561a894dca507bc7d5def9964c004a1c13d17a6cd816ffeeff6d0047e780ebab3115cdce881a929ebef8e923a45294ddb5d1ff0100000e0684fe9d84bd0bc3a75c72a5a15c7077a0855303a3074db7a1c90bf67df4ed79ff28bb1f137fb3373a14f85d9baec2f315310579f8fff5b5fac927bd0c7dd33cb8eeaea5acd3ab0000000000"], 0x2e4}, 0x1, 0x0, 0x0, 0xc010}, 0x50) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x8db9440d69b69e4c) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000, 0x10000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_REPLAY_PROTECT={0x5}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0) [ 948.010100][ T8433] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 03:20:41 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x58, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:20:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x9}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) 03:20:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x12, 0x5, 0x4, 0x3ff, 0x0, 0x1}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r2, 0x28, &(0x7f0000000000)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={r3}, 0xc) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={r3, 0x3ff, 0x18}, 0xc) r5 = socket(0x10, 0x80002, 0x0) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x4, r7, {}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffe0}]}}]}, 0x38}, 0x1, 0x1400}, 0x0) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0x12, 0x6, 0x8, 0x6, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f00000000c0)={r8, &(0x7f0000000040), 0x0}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xa, 0x8, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, [@jmp={0x5, 0x1, 0x5, 0x1, 0x6, 0x1, 0x8}, @map={0x18, 0x0, 0x1, 0x0, r8}, @call={0x85, 0x0, 0x0, 0x26}, @ldst={0x3, 0x0, 0x2, 0x5, 0x1, 0xffffffffffffffff, 0xfffffffffffffff0}]}, &(0x7f00000002c0)='GPL\x00', 0x401, 0xb5, &(0x7f0000000640)=""/181, 0xc0f00, 0x4, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000700)={0x3, 0x7, 0x4, 0x3}, 0x10}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xc, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x401}, [@ldst={0x0, 0x3, 0x6, 0x2, 0x3, 0x50, 0x8}, @ldst={0x2, 0x1, 0x0, 0x8, 0x1, 0x6, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @map_val={0x18, 0x7, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0xcc, &(0x7f00000000c0)=""/204, 0x40f00, 0x5, [], r7, 0x18, r1, 0x8, &(0x7f0000000200)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x8, 0xfffffbff, 0x101}, 0x10, 0xffffffffffffffff, r9}, 0x78) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000020000000300000070020000e000000000000000e00000000000000000000000d8010000d8010000d8010000d8010000d8010000030000000000000000000000ac1e0001ac1414bb00000000000000006970766c616e300000000000000000006d616373656330000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000e000000000000000020600000000000000000000000070004e464c4f47000000000000000000000000000000000000000000000000000000000000000000000000004f97b66e21d269e70f7e2efe9c04b4659b1cbf29c34af71d59ae3b0b0a0bb21986399e00fb5abb00000000020c0000000021860000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800f800000000000000000000000000000000000000000028007365740000000000000000000000000000000000000000000000000000010000000000000000600053454f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000800000000000000000000000000000000000000000feffffff"], 0x1) [ 948.167749][ T8440] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 03:20:42 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0xf0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:20:42 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r3 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r3, r1, 0x0, 0x100000001) r4 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000040), &(0x7f0000001080)=0x4) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f00000000c0)=ANY=[@ANYBLOB="040000000904f285b64d018000000000000000000800"], 0xc) 03:20:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0xa}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) 03:20:42 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000706010341d43a59a4df8e5f0d64605f99683ef2c44c5b14331600001333195197a0a4f80000e9000500010007f871980eb6772bf79258bb4600a5bfca10db53bc54eaf96a308ac2ac83a14bc01b8e66c94d97dd82bdf4c9ff8cbf8b9c5edefaf38f9f27ebba17c6246cad979570f8a218dfb9f1bbd965f5e3eb67108327446573a3e385f7eb1759c9c9171fd635918a6f37d664181c5ed4787518efc66c0ecc30196be6ac76e2a6c0e4580f4da9b3dc6ddf258c16224caf17ccef30642e2692a45ca93f6b9f7205e13723bea9564e593b3bbab7330cdae568473a6db201"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r4, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r4, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) ioctl$int_out(r4, 0xfca0, &(0x7f00000000c0)) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20048880}, 0x4c004) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendfile(r2, r1, 0x0, 0x8000fffffffe) 03:20:42 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x300, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) [ 948.712052][ T26] audit: type=1804 audit(1586748042.359:685): pid=8465 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir080444537/syzkaller.UzUSE7/691/cgroup.controllers" dev="sda1" ino=16135 res=1 03:20:42 executing program 5: socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socket$inet6(0xa, 0x80002, 0x0) syz_genetlink_get_family_id$tipc2(0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x2d3, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"/313], 0xb8}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) write$binfmt_elf32(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f4500ae00295db000043a800002000600ff0100002700100038000000b600ff00536301000400ff030200000000003300000000d202217115c366f4079f213d746a7bc33cee950000a02200000be86c3ebae2704632dc680456d1da77f3d1"], 0x72) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="5000000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="062800000000010008000a00770c60acf1c21bc20189a13f087556ed5b6cdf130d6cf1cecd6c0aae95680d5fd01ec251", @ANYRES32=r4, @ANYBLOB="280012800b0001006970366772650000180002800400120008000500eff300000600030001800000"], 0x50}}, 0x0) 03:20:42 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.current\x00', 0x275a, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x40002, 0x0) mmap(&(0x7f0000b54000/0x4000)=nil, 0x4000, 0x0, 0x20010, r1, 0xffffe000) mmap(&(0x7f0000d4d000/0x2000)=nil, 0x2000, 0x0, 0x2013, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000f44000/0x4000)=nil, 0x50707c, 0x0, 0x2013, r2, 0x0) mmap(&(0x7f0000196000/0x4000)=nil, 0xc07000, 0xffffffffefffffff, 0x8032, 0xffffffffffffffff, 0x0) 03:20:42 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x94b, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:20:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0xb}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) 03:20:42 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) mmap(&(0x7f0000162000/0xe000)=nil, 0xe000, 0xa, 0x20010, r0, 0xd8c1a000) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000080), &(0x7f0000000180)=0x4) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000001c0)={@local, @loopback, 0x0}, &(0x7f0000000240)=0xc) sendmmsg(r3, &(0x7f0000000f80)=[{{&(0x7f00000002c0)=@xdp={0x2c, 0x0, r5, 0xe}, 0x80, &(0x7f0000000340), 0x0, &(0x7f0000000380)=[{0xc8, 0x10f, 0x5, "1840770855228ad1b178e5422c13d3cc5d292e46f5da9f1ef415aaea62a16750513aabe6ccd548fe5acd90de75d33df8a2199777358f75665b8ef0838841648c21344aa807449a32014b7291af182b87a12bcaafeb20e3b69c6e4eaeda4c1b8816c6c973582ded66848360e89429ba243f9157beefbdbd91c6293710cc19da53a1e0c7378390703053b8e4cb8ea8e307d92aef86092eac37934ae6f2cb14556cce05ec9fb5754ee203c5a9d520ad9d942397"}], 0xc8}}, {{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x3ff, @mcast1, 0x4, 0x4}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000580)="adf46cc3df6bb95011346dc453606e3da74a755393a0d4c30597cd05fe544a7a4a7d731e500f3223f1f59a7f29c134ed6e2166907e80fa22fd35ae6eb7c131c5ec1244cea1dfd07239b673aaa9ed581da154b5224682a0904b7de272d4e926172f39c363ebadce8d8b0097f9a9ef571e711e2b131822b7650f32a8a4956b41dc33b6fd8f89022ab6ee4bdd5201f1282305f1295ee1381f", 0x97}, {&(0x7f0000000640)="27fa78e061b80d1a082bb7f9bf71db00a863164f12317e73cfdd520e92dff3e47996111e534d20c71430d878005b9bc2e74b9d95c094a753253c900cf51fa5b56fceb48c4de216e1bffea301b90085c77b84ade250d6dcf3198bce384c88b6d1c59dd0fd9b55c151d8982d7185505b11fc9dbc431ad460891a35170f7678f93af5d97c84fd0dfb1ceb39a7e3c36e9aaf982ef46309b3b9c455b750eeee692b0917367cb9a7f70a7c7abb7d68c9b17ba9a66d86f471bc4663632832b85a8549301e1356", 0xc3}, {&(0x7f0000000740)="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", 0xfd}, {&(0x7f0000000500)="b0b2274293eb086cb9b6f47174c481b0484836a5d184e7ba5ba987aec036", 0x1e}], 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="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"/620], 0x278}}, {{&(0x7f0000000b00)=@llc={0x1a, 0x312, 0x8, 0x0, 0x0, 0x29, @random="e903943f71f8"}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000b80)="fabf81b3059684518745ffaa368777e1e4bd58002567e26c472f42c93c89c842b1603294049af5741c9b0593bacd8eb01c4975d449d619a383728b604cd2955522886fc960f3c07920d66d02b88b6d2339e7b9bc9268709b97dbcd46850e52e498dbaf1c37889879801e9a52b1af8f8c91814320a03baf5093f84c141d6e39dea0e799337c462ce11a88da6192f90e2e3179f7b05abe9f6b23bf211e3f4f251a", 0xa0}, {&(0x7f0000000c40)="1b82a7ba07144d35d83a0c108d6010c5d29bac8ab54012c09dfb61c38564e94eff28294985a03556bb6fb629c1f7676ea41d2e39d7cd638e03dabb461006019ca3cde9832292e33cfe4f02773c8f8591363a2e3e107a5bda1d9b98614d0eeb2e2367574fcca8bc9391c4d5543ba9b2581c3bc8e6a90dfc995f243f0b98b99d7976ab4e26cfe9937230e6559cadf1e7e8abe4966fb54f1ad101f68df5babd1f09c2c044410e6f063f11722a7a1e62808411ae3e36d02ca84678569599818e3e0717765fe60e5b316150d98cc5b5f9558941debc38a8", 0xd5}, {&(0x7f0000000d40)="75599d2c32d09646858bf42a27c4e764df4394bb2fc1546a54651c58afd194498b0f82069310bb4f6199d77ad7d1e760", 0x30}, {&(0x7f0000000d80)="a0bd90bafc8d2f1cd7c5cb90bb954d875539020c4599d2e75562434bbb84bc85d27c9acbe9a3b3b9ff0597eae76ab36730a71728a02ced6316c3e2767cc7b7ae298205d357886440f691f8fddecacb694d6a877efa8b25a6d80c98bfd5d8907930f0c0d4792ab9ba79", 0x69}, {&(0x7f0000000e00)="d5dee5ace113df6591334caf94a38880665e3462ca4001d98dda65da5fa017106762df384d06bd88774c90e08602f6b029dcdcd379c1a9771561acc4d8818067e797c5bbcb74dee33389a8328fbd152c527c00ce767e3fe63f2c7f59cc2e3e9dfb9ddaa2cf76162cea8edcd4305544a489ea42e84d497c466b8f5ba497ad9a5047b0b2d8eadeb8311eca47259679853e9701177ca6407bca77e2c90a7212b29e2ee552244d39993fd73315c89557e365e36d44dd13e6bb452de5d58238e95b9060", 0xc1}], 0x5}}], 0x3, 0x4000080) [ 949.024810][ T8484] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 949.071433][ T8489] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 03:20:42 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x1400, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) [ 949.190025][ T8484] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 03:20:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0xc}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) 03:20:43 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x1b4, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xf4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x10000}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8}}}}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x16c3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80}]}, @TIPC_NLA_NODE={0x38, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3e8}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x10}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x3}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x36}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) sendfile(r3, r1, 0x0, 0x100000002) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040005}, 0x4) 03:20:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000140)={'security\x00'}, &(0x7f00000002c0)=0x54) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x68, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}]}]}, 0x68}}, 0x0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[]}, 0x1, 0x0, 0x0, 0x8001}, 0x4008011) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000240)="7d0000001300192340834b80040d8c560a0676ffffff81004e220000000058000b4824ca944f640094750a0e2900050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100050c0800fcff0000", 0x1e7}], 0x1) 03:20:43 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x3f00, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:20:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") r1 = socket(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000000)=[{0xb1, 0x0, 0x0, 0x8400}, {0x6}]}, 0x10) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) 03:20:43 executing program 1: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f00000010c0)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7c}}, 0x24) bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) mmap(&(0x7f000002b000/0x3000)=nil, 0x3000, 0x300000a, 0x100010, r0, 0x57298000) r1 = socket(0x8, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000040)={0x2, 0x0, @local, 0x1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000000)=ANY=[]}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$cgroup_subtree(r2, &(0x7f0000000100)='cgroup.subtree_control\x00', 0x2, 0x0) write$binfmt_misc(r4, &(0x7f0000000140)={'syz1', "bdea49fd1f1a1dc3f00dfce7693b4f1a030c1e6b56a863b8ca8bb67c488325c2b9e1512fa13e5a962fbf9e19f1e77729928c615efda5c8f9b3c8d57c87291a00149550f06bd3dfc693df374ab556e538e4109607738503ee2d0577880b8118"}, 0x63) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000080)=0x10001, 0x4) sendfile(r3, r2, 0x0, 0x100000001) [ 949.517600][ T8513] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. 03:20:43 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x4b09, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) [ 949.596287][ T8521] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. [ 949.707807][ T26] audit: type=1804 audit(1586748043.359:686): pid=8519 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir832147902/syzkaller.uwTBuJ/893/cgroup.controllers" dev="sda1" ino=16384 res=1 03:20:43 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, 0xd, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000894}, 0x40) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, r5, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}]}, 0x24}}, 0x0) r6 = socket(0x23, 0x3, 0x7) write(0xffffffffffffffff, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000001880)={'broute\x00'}, &(0x7f0000001900)=0x78) recvfrom$phonet(r6, &(0x7f00000000c0)=""/29, 0x1d, 0x10000, &(0x7f0000000180)={0x23, 0x20, 0x0, 0x2}, 0x10) sendfile(r2, r1, 0x0, 0x100000001) recvmsg$can_bcm(r0, &(0x7f0000001740)={&(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000001680)=[{&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/114, 0x72}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/164, 0xa4}, {&(0x7f00000015c0)=""/170, 0xaa}], 0x5, &(0x7f0000001700)=""/36, 0x24}, 0x2001) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r7, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x28, 0x140d, 0x200, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008051}, 0x8004) 03:20:43 executing program 4: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000180)) r1 = accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000040)=0x1c, 0x80000) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000140)=0x6) r2 = socket$inet6(0xa, 0x3, 0x180000000000000a) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000100)=@fragment, 0x8) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe, 0x1, 'ip6erspan\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x30}, @IFLA_GRE_IKEY={0x8, 0x4, 0x3}]}}}]}, 0x48}}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x4000139, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x37, 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000080)={'veth1_to_hsr\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1d}}}) 03:20:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0xe}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) 03:20:43 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x5800, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) [ 950.005919][ T26] audit: type=1804 audit(1586748043.659:687): pid=8537 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir080444537/syzkaller.UzUSE7/693/cgroup.controllers" dev="sda1" ino=16177 res=1 03:20:43 executing program 4: socket$netlink(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) sendto(0xffffffffffffffff, &(0x7f0000000440)="1f89fb33b484e34aa1f4c4db71428717b114afd565f1770e0f1512810683cfbbdbf298a22fdcee52980c6a61423909f854c332cef63e41cd8df1709d841c84e5f2a7250f62722b894e6340d91d956bd4cffd32b4fa65adfd4a691395edda36", 0x5f, 0x40000084, &(0x7f0000000500)=@isdn={0x22, 0x20, 0x81, 0x9, 0x2}, 0x80) pwritev(r0, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, 0x140f, 0x418, 0x6d70, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'mad\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'srp\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'uverbs\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004095}, 0x40000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r6, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r6, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000000240)) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="e371a01c7d83e16db1918b5328546fd0db633ad73f48121530e272e1e14400"/47], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800"/20, @ANYRES32=r5, @ANYBLOB="000000000014cc8a0000000000000000"], 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x3f00, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="e495656326b80826a884f38814d36b9f48965e0b3c5b699540827c65f44fcba8c9022170bcbecb040000000000000011ddfc4ebd777ce8a36f6f3ac4f351b48b02180e47b9a7f8cc91f1378e7b67ea377ce94389067be348d67b26eda4f810433feb70", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 03:20:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0xf}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) 03:20:43 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x2343a726) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x0, 0x8013, r0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 03:20:43 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000100)=[@in={0x2, 0x4e20, @local}], 0x10) write(r2, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000080)={@any, 0x7ff}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") 03:20:43 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0xf000, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) [ 950.347379][ T8559] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 03:20:44 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x34000, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) [ 950.506778][ T8567] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 950.543341][ T8559] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 03:20:44 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0x12, 0x6, 0x8, 0x6, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f00000000c0)={r0, &(0x7f0000000040), 0x0}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r0, 0x28, &(0x7f0000000040)}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr="d838ed6e052b6211218092bbe1933bfd"}]}, &(0x7f0000000180)=0x10) 03:20:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x10}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) 03:20:44 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r2, &(0x7f0000002440)=[{{0x0, 0x2a0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0x13}], 0x1, 0x0, 0x0, 0xa00100}}], 0x4000000000001ba, 0x6, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000026000102c907359d00008f01010000da6e5f3f00b17f20a741d732673f92b8824daf6c7442ca9b84a90121a500306377e87b94e2ca68026b89dc1764fc8737861d779c9d7e55cb6020aea5360726b544370e585253bcb877cb5a9150d5f6a7156ee957db1d8755ba42c46323340b3d164213e38038d9161394f6ed90b704d71a", @ANYRES32=0x0, @ANYBLOB="0000108e0dffffff5cdc4308009b936c854bf55e61e50aeb152b55e757cb75c52e3a284e2774db72dc204ae84f635fc605ca2f874b0b8824d65067662a3d138a90cfe2d089c55fd7be933bc7844a65"], 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x4, r3, {}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffe0}]}}]}, 0x38}, 0x1, 0x1400}, 0x0) r4 = socket(0x10, 0x80002, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x4, r6, {}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffe0}]}}]}, 0x38}, 0x1, 0x1400}, 0x0) r7 = socket(0x10, 0x80002, 0x0) r8 = socket(0x11, 0x800000003, 0x0) bind(r8, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x4, r9, {}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffe0}]}}]}, 0x38}, 0x1, 0x1400}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000054c0)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000340)="b4d3365866376c065356679ffbdc29a422137f253382b02d805d95c640a9ccfed16a449bbfc330a89fcf625b742c4518a9dec48d8852e3cfef2c9b30b05e77c67ad7d75ae8ac7eec3d837a2b6f31a13f7e93cd79e50cf635ed13160a3ddbbb59cdb06560f1a5018960a91ee6978c91d230790a1f7a6ef90dbbffbe060fc2f4c5f6ac6ee36b3dc8951afd5bde40c0d58b9d", 0x91}, {&(0x7f0000000400)="140e0dd5aed375e1659f5e7af84d0edc004b0cdffe3a4983d478211249aad3f958e3c5d6f80f23c643d7c7889b0648fdcaf8c0373b91c844cb8a5bbda22215211d41ff78a37460bc882f87aa4dc98d74a24535d6c511178767cb64762830b4827efbcff283285607f50a00bfbf4c01836754b2c388e9d761902c97f14a15fc99dd5fc9825311a720877af1736f964d354ba926416b696d86c3d4d4e01acbcbadf309f3083c49df3b", 0xa8}, {&(0x7f0000000040)="53b2b3bdd9fee3e82a44c5e67079df2808bd97cc1b1875a01ca2e45f", 0x1c}, {&(0x7f00000004c0)="755aac00df116ab1a42961ea66d819d3677cb26664c63c32a2b3b66f4ec2d912272d12ee47835f9e53a08d3313a6f6c0dc55e4fd5b7d6ea41b92243efbdadda1d4074faf778370f23ef095bbba686751c7844abf7bfe24200e8e49d7d6b4193b633d3b865fb8b94064011e6fcb52ffd21c564989a52e150b34fcb15a4493e38154b3950f1cac41bb2fe4e637e0d9a93b9a78914376f9673ec79057c4caa569c0aca30b719749a512093b02e6a1be10dae59bc3a4fc5e7757048d7b3d19cdafbb6bc905b114671bb139b09d7107b030370fe6a26330ee007c3b6459b8daa537a01dd937a5c65d892f0d40321c05940a55", 0xf0}, {&(0x7f00000000c0)="ce24e8983ae8e0c4e0e56515e370dcdcf3f03252", 0x14}, {&(0x7f00000015c0)="720a835bf40c94986d2b2613941bdf2486f6b1a682e5d238e6f601248a6cdb428218cbc2ef1f2bd00cd77cd0d5426e42cc2964c4046e86572cbc584429ed9059159e696b0c7ee0529a1c295c8f67282c03acc5f84422aa9435af1f6ca425aa6f3868be6d41ab0d93b746a6da27b24e2001dd76da15f3971203b76d116cdda04efa0d388453b90df15797b830ba4e91deb85b18457808b693c59f1f7745741dc5cba0479f1e8bd3f54ddf6bf02c6ae8014b25ade495d76280a20ba1c756388f401f4381e5580b790deb1ad332a91b29dd24fe2d8fe0b8e25db02fd7d23436530076704042709b174609ec274558592291698924", 0xf3}], 0x6, &(0x7f0000001740)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x20000000}}, @ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}], 0x48}}, {{&(0x7f0000000140)={0x2, 0x4e24}, 0x10, &(0x7f0000001980)=[{&(0x7f00000017c0)}, {&(0x7f0000001800)="6072bcbb5c4a8df37d757a56c6ec04b1a3f42d7d75178b61549fa20c72de84c9b07bb4be6cb207b299dda32c7743eff9d770bac909333d75b64c5b81d88c537a2e930e339089176a85decbab9f5cfa9a765b9f46d960df862b988068d82082ffc905787a52db5315836d9bf2497c105e34dbb5886fc58cf5e8162527c05ca1ce1a2823f93f279972c480963f8c0052419e44975403669da15561da81c90e7cad982431916c07711678acb7b12eac0a473ab7d38a34409a63d665", 0xba}, {&(0x7f00000018c0)="0e1d07c614eed8000f1404d7d7cb7b3073a026293f11fbc7aac44116aa021c3f23b7a135cd57619424770a4734d584a6d8338674c9e341d979ade369f231fd76da6c0740a97ecbcca5410ccb5b43e5cc22675fa961eff820b5036898b5159830fe91cb0e2d243abea73491f65ef4724986aca8b149b69c9e3193ed18aec113095337df2b2af536bd7c3ec1d1ab59f01946b8798dc3aeee581680c81107c49de48653fcbe00c87a885b79aa491ab7ac39e4f7fecf9e47e7bd1f05b8d987db21", 0xbf}], 0x3, &(0x7f00000019c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x22}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8001}}], 0x38}}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a00)="d1e87f45b179b9616c9eedeb33554498ea8fbf0661d063f6a19f8143e62f1effde8522769c1fff25eeced2157b6d97e7610f5b31d63c97e5708b0c4aad2a6cb7804adfee61e90bf529bd2fe96a22f86b5ac3ad3a53abe430ede7aedaa1ca2ae955180af4f2ccde45180ff3ed087b7252216a8e5fc813d7763bf46b4537493f1d7e4296784894abb14dd8416875c0b73c889e3999d3862da0e661c42366ec6090e0e9eb8761972d7b5c634bc56eeaf5dff0b3acd58bb6a3508c1c9c6c658577b2cb3d328975baf233202c0a2d256cb3d9496a174008e93f16b89efd2d13bb5983ed1fc24a29faf742", 0xe8}, {&(0x7f0000001b00)="501a8f5889640a55f05f3b68be74b73b7e749c68397a315f579fd7c8495e61acffc5894464c0cf29469bb1f7ac643a921b2a930d1a0e7b2744cc83c1675ee2b07d589d4583fcf92af2579b84d0f5aa60bd02719d2e01dceb238768e8ac95bc6306fd6444f5154550e1db6d26e35f1678cae4bcf3b93adde27a458db66ff8161cb875c8f874137edaad4726420cd21ed4b16a20a99ca1665314f475ba0e4f7b09f2b74048246001d6e8a10edd25fc543c4f9478657aa6d85e2efe54101cf8e79539523492094deedd", 0xc8}, {&(0x7f0000001c00)="58a68678c70849092c74fc0da59e444366bfc14dd561a26f20bd8a9e94e490fea5ab400f98f98a4656748392fd0e0f31e693ef90f70aa4652612c1439d7e8afa6ca2189d578727bd0ede15ff488df8caa76955abe05a3a5c8f23c7c4f1d58fe76e50c6aceb27375d755d22e594ef792068a06ce6495962ed8e01a4cf5f657e15b6431f0a8e308e2d3ef6abdd358aa4a6f5813ca162f06cf98ca77b7e816b760f4555a5a93d426eb54c16de948b025b95cf92814c01ac202855dd49f9e3434aa884570f7a5903e793c8d7f935", 0xcc}, {&(0x7f0000001d00)="474c31dba5334f1f01080aacfc9829518b5a2b9a5bc5b71d24f7c86f3fef37d1ad0306e22c3ea7718ce3c03d5313b1d9e285fd03a6c137047d1de82158e2cfa0c71171b57966d084bb5b4ddf8b6c6eb21bbaa2b42c930caae28c9f002016dd783bb0f38482770eba4283df13bc2bd0953cd1ccf4b4b45ef604f607fbadcaff16b775c9056462c6721c9dfe92c2d4d3439b1b3486f21746dfb10f5a60f94d668f811b8e7dd1da1194ea37bfc83a259dd9b936203f69135d14bc717b206719886076589e60e75aa8c0e6b6a201", 0xcc}, {&(0x7f0000001e00)="c50c656a397820d78cd53306d8dbd621433f59a3b652a903ccb21a0de607da26b4534233cc14672c3f2d436359713eb0c60c10e33abff7b2a02d17c4d123284c12501741dc3b6336c0bc2f0ae7972020923a37efe7fd61c31b62190c0dbf21cba5f790621d5af7226465461e9d20cd583f90527d14205e37fffdf23166fc0529f6e3d4e48f892bd0f12d58fcb432a061e36d29091d", 0x95}], 0x5}}, {{&(0x7f0000001f40)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000002080)=[{&(0x7f0000001f80)="2925a558cab38aee0792890d44f5d981b3cb6e5efb41cd6daccf9f909a0b38611817aa5bdc815c53bab5006f99f8f5dedd65352d5b9d16cb6557ea5eba51c54935cebf4c26b13773b8c23bcf33bfbee6a482cd19713bb86f8266cec5cca14a8ec65f6d76ba161ad25a341bf9facacab06609b1902050a27ae060410f3cf27bf753461cf4ae1a166eca1ace2ee732b8d6bcc67c4f2feec8f085dfde24c3a206aeccf308d254e33f2ccf304c64ab8969039730d88fdd992540d0786879f7a198c27d60748a12ae1e06174bb9428f1881631800c4e761f86e2346cbc8d4eb675b73d1714214af89c3d94ad1fa", 0xeb}], 0x1, &(0x7f00000020c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x100}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xa3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x200}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x96}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x81, @local}}}], 0x80}}, {{&(0x7f0000002140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000022c0)=[{&(0x7f0000002480)="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", 0x1000}, {&(0x7f0000002180)="60dd7c8a19213144c8b9f95d738d134f2668e36ae69bfac74dad5d0748fae371a1c205301510ce2b7d66d62d9421695b0ce38064ea6e695549f43fdf0c0860bfaf95b2", 0x43}, {&(0x7f0000002200)="97daee7aace0e05716ce527299db22276defd43cda77425cc0dbb9e481d9ea37685c931b2896764c19e8e1547d113e719f0803af0a295618d162724948687588185477af96332f41f7291c31eb99e249e850ca71", 0x54}, {&(0x7f0000002280)="2e19788cb702a2619de566b5014405cb", 0x10}], 0x4, &(0x7f0000002300)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffffff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x2f}}}}], 0x50}}, {{&(0x7f0000002380)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000003880)=[{&(0x7f0000003480)="6b03303683acc8c0e55426cad66d910f86d24498933e7128c1c47c4f3e0e5b82bdb00f8e37090fd2a7fbeb239a2669ca314dd05763b0681e45eca4cb97d35984eb29efeeb280410cbe1a10b7eaa86d7a386020c34d4e39cf714515978963093a770ec1ffe891fb75b25e44884a5bb5503cf183d31958b44b3cdda49e42efd98405cb3ad3224aa0e9784d2ef7e6315646bde9d158d5afbd72d5553d3bf407a50b0c502dbfaf8f23e8e20c9f1736ef4709b5ca6faa7c1e314c239f1d1b3544c3eda82e817f43cc9acead42899780032219ef0a13a5b7259ca818096de581421a0a25b008f769b76bf109443a4ace5386a5bfee", 0xf2}, {&(0x7f00000023c0)="cf507b2466623e5cdf36f16b4edf9907c954501ea5bd05a7c75c96c853f9dfb9de93a3f13480351e8f249f4a65a4d19eefde8f5f7a27b6feb758074bfae72d3bacb54db077802253fe63c6ec17a89a6b36114cf94f65a2cf2c60a65e", 0x5c}, {&(0x7f0000003580)="15cd0cd1f9b719561383f77ffa1b2cc107e6a164bda18778c7f73503", 0x1c}, {&(0x7f00000035c0)="155ae44be0bf83c1701e7de0d64af0d1f44ab3cb654eac28345b6a677ee0ea8b655ac78f557612bb83437a7e92c0261f34b11997e9e4302c797f039e4827e742b38f3261d3ffc56d339a0737c33aea2f10d8bf0fc5b7", 0x56}, {&(0x7f0000003640)="1d285be4dc2b2420861f4ce249edf90f582b9d9d2c839c3cdb3c3f513d218cf4e48990", 0x23}, {&(0x7f0000003680)="186a72169a1f4b22a0f0ed79eda976b602af4d", 0x13}, {&(0x7f00000036c0)="8fe55126ace35221e95cb69c6f30b03bd4690b380580e6bea8d37585e348", 0x1e}, {&(0x7f0000003700)="8ffb520cdcbe1ab1a9bee80e6d0e8e28258ea7e2eb6cc036cf46297c84582f6cd231ad3754929b83fd75a4e5f9dda819dd5cc7c65a1eccaa8e3d91c9dd8ef2261f82f0c3a4927d523eb4bf00790e63293af1c6862279f2b3458f8e1f6ab6f3dbaaa65c96884711231a4734", 0x6b}, {&(0x7f0000003780)="1151f378c007b5ee52a7cfd93de69cd44e6f86caa52bb0f5b7f2e0e96c82ebe8092ff9c8b6dc893e1556e9e62b458aa81331444db88f505873b4bdbd49698c0b4ca25c334212f6ad60af17fe476b2709c42f77e5e040ae725b86fddc72ec98af14a67a5d80fb8a949c4c4ed3c8fa96ff7c2beb39d6e03582a374e6607ece7f4ad4bdad00866a70d0fb4f6adcf9690afe5d7d5e018b3b2899d6c8bc792dab80f0c334d9757c9427e7e4cbbaa1279f7a5e18d2636f5cfa69902caf0bcba3f8cc007c95ce108e8d6d46feea62967c6e3949fb4d", 0xd2}], 0x9, &(0x7f0000003940)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x34, 0xb8, 0x3, 0x7, [{@rand_addr=0x1, 0x7fff}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x8}, {@multicast1, 0x6}, {@multicast2, 0x4}, {@empty, 0x7de0}, {@multicast1, 0x80000000}]}, @ssrr={0x89, 0x13, 0xc7, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xf}, @rand_addr=0x5]}, @timestamp_addr={0x44, 0x14, 0xe0, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@empty, 0x3}]}]}}}], 0x90}}, {{&(0x7f0000003a00)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000003d40)=[{&(0x7f0000003a40)="fc33a98f9a66beb0be607463cc3beb11e0dc415f62138a0e6a4f3c22ddc1346ec2a30b4b6bf3f7f83d3aa0827f6441cd35f0e6bd6eaee39e12da4b2c119aa13677aff9e502d0a7aff128e7c1d24fbdc7535bd8b70d44dfac1733ed6a07a77b4376024d928694c0fe54a6d97db034ba4622988040202b52d84ca604bec216f0ce40", 0x81}, {&(0x7f0000003b00)="72d64bb32ed1d10bdc187e3f3b10f273b0baf678776be9c84461c491e26ed37d4cb287834ca9259cc4d24b7ae34e67b26ac584106542a661fb46587ba2a02ced257dea55226cc41328ebe12ad821ad496ef4a2748d53a811905ba510c61dcc777da5c0ab387a522ca11497361bb376cc770b199dfc70bfff4e734d4f9ffe7a73af04", 0x82}, {&(0x7f0000003bc0)="c66d69afcc51d4358261420c03aeec01b8436a2b9bf6ca7d37ab29faece90e9daf59f04010aa51b3b8599f2cd21c6c4297b325e26bbcf8d5dcca1589022419dc1fd95b12b7a09b660d5f8fe39dbe1747f6f97405663c288d6fa8433439540fc41c5425b282a35df7cc47ef41677783163b7fc27c5c56666413b7818d17a2798aa38bb5fb5ccb7b46865937b31964204689c6448e9bc393f5bc1788e37ebca7b2dcf247ae3cfd4fca6caaae1069a05a48d3d974f93fefbe1c179038a9aafec7d42ac05c0e7826474cae8fe2d9", 0xcc}, {&(0x7f0000003cc0)="cb0922083f3518b7056512234b23f6a0a3b00d32a4b6fae40f6d41cef8c5d8c1b8988a8e40127588dfca72aab5b8ea6476370f567a64461ded79d1935a6bf91d1f40290e7c6f859f17a002", 0x4b}], 0x4, &(0x7f0000003d80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x2c}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xaf}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7fff}}, @ip_retopts={{0x5c, 0x0, 0x7, {[@timestamp={0x44, 0x18, 0x56, 0x0, 0x0, [0x800, 0x0, 0x1, 0x4, 0x2]}, @rr={0x7, 0x1b, 0xa1, [@empty, @broadcast, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x38000000, @rand_addr=0x13]}, @end, @generic={0x82, 0x8, "f476387b41d0"}, @generic={0x89, 0xa, "9b931bc95251416a"}, @cipso={0x86, 0x6, 0x1}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffffb}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7b}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @loopback, @rand_addr=0x401}}}], 0x138}}, {{&(0x7f0000003ec0)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000004f00)=[{&(0x7f0000003f00)="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", 0x1000}], 0x1, &(0x7f0000004f40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @multicast1}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @multicast2, @multicast2}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x10000}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}], 0xd0}}, {{&(0x7f0000005040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10, &(0x7f0000005080), 0x0, &(0x7f00000050c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7ed6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x19}}}}], 0x50}}, {{0x0, 0x0, &(0x7f00000053c0)=[{&(0x7f0000005140)="06e7df6283adf740a45bbaff6d6c446ca2bddfcc21718276fc63d7bd269dffc579fbd74964fd89bc0e1045a8004ea5e4af8e305416dc3650e6034c6c479efa89805213a65e70c87b6ed3a260138fc598f7a56150fc3a5b0f11d6ae6af0c6bea0a85ac74a", 0x64}, {&(0x7f00000051c0)="1692b07059bcb486af89ce15a32df6eb5cf1872b940d82c3dd9ee033a55760c8942d750ae76eebe868a7be3121c84fe4cf3896e31734f7e73cd68d695401d7990d523839aff18067fd081acc14b17ccc3cb7e11efb21da54da417231e79c7902d7ccd908705e682992ed64f6507d620025fcaf44a14ebeed5ee3500686ab82b1cd26ac832267a40807753bbaa2ea6c36c638d8cfc3065b30197cd1d53e54374f300fc9d401994ac6ec06e86a6c7058391decd713ee735b136baf00299ae9f3def922390ff21c6abff70624967de188b12932db4deaae76e737c6d9101999fb2696631e769c1875377d3c757df3e2d4cd08d6c3", 0xf3}, {&(0x7f00000052c0)="96415d4a85ce1d915a6d0f0b5cfad27a7d6244eba8cb4951562f842047ee566d6e63b405805e523c3b7056ffbdf408d6157d0ae03b91dcca00f879f9b6c9b247d646f4a5a5c7eddb973c7c2c5f488b17817a2a6488d0c7ae4a74a7ebe2ec881d467f0844142948cb140eec5c72debb315d914979e4750db131bc3cd1c7c3af184df012bd3261a18c33a84f57442b074bb9b8052252baf65809b0a2b9f2654e3c661f7f66fda35fc0f7a1b0479d50", 0xae}, {&(0x7f0000005380)="f1be0583bbb1d437cc5d736a8b6ed6f87bcdee30f7db306241bd4617b810a9c7b838", 0x22}], 0x4, &(0x7f0000005400)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0xeb, 0x1, 0x5, [{@local, 0x2}, {@remote, 0x1f}]}, @end, @generic={0x89, 0xe, "688919da3d641bd801a0d914"}, @lsrr={0x83, 0x3, 0xbf}, @noop, @timestamp_addr={0x44, 0x14, 0xf3, 0x1, 0x5, [{@local, 0x4}, {@multicast2}]}]}}}], 0x68}}], 0xa, 0x40004) 03:20:44 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x400300, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) [ 950.848502][ T8589] IPVS: ftp: loaded support on port[0] = 21 03:20:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x11}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) 03:20:44 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0xf0ffff, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:20:45 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000600)=0x10) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) r3 = accept4(r2, &(0x7f0000000180)=@ipx, &(0x7f00000000c0)=0x80, 0x80800) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000021000100000000000000000002000000000000000000000008935e02", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB], 0x28}}, 0x0) ioctl$SIOCAX25GETUID(r3, 0x89e0, &(0x7f0000000200)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r6}) setsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000000080), 0x4) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r7, 0x84, 0xc, &(0x7f0000000000)=0x9, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x6, &(0x7f0000000480)={r1, @in6={{0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000140)=0x2d3) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000030c0)=ANY=[@ANYRES32=r8, @ANYBLOB="00b4f700"], &(0x7f00000031c0)=0x8) 03:20:45 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x1000000, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) [ 951.432765][ T8633] validate_nla: 10 callbacks suppressed [ 951.432775][ T8633] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 951.536399][ T8633] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 951.734541][ T8591] IPVS: ftp: loaded support on port[0] = 21 03:20:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x12}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) [ 952.016049][ T8635] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 952.053086][ T8635] netlink: 'syz-executor.2': attribute type 27 has an invalid length. 03:20:45 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000040)) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000680)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000110000000c000980080001"], 0x3}}, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendfile(r3, r2, 0x0, 0x100000001) [ 952.437874][ T26] audit: type=1804 audit(1586748046.089:688): pid=8679 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922123606/syzkaller.TgTSaq/687/cgroup.controllers" dev="sda1" ino=16188 res=1 [ 952.693279][T31896] tipc: TX() has been purged, node left! [ 953.345379][ T26] audit: type=1800 audit(1586748046.999:689): pid=8572 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="memory.events" dev="sda1" ino=16380 res=0 03:20:47 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="01010000000000005a1745a86da4"], 0x3ff800) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x100000002, 0x0, 0x0, [0x6000000]}) write$cgroup_subtree(r0, 0x0, 0x0) 03:20:47 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x2000000, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:20:47 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20, 0x0, 0xfffffffe}) pwrite64(r1, &(0x7f00000002c0)='_', 0x1, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000140)) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000400)={0x0, 0x8000}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000480)={r3, 0x7fff}, &(0x7f00000004c0)=0xc) socket$pppl2tp(0x18, 0x1, 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000002) 03:20:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x13}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) 03:20:47 executing program 5: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240), 0x9c) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x1) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001f40)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000000c0)="15907e37b69b8d07d691f483ef6ed0dccf6b1bee97d5fcadbc2eae29c80c59bc9ef004dfdf99c0d8eda5f954b0b23373d1e9194bf42191522b66a1c5e854800b0ab4f0e85db4b29d0fb90499c45779d02c052cafb4bf100cff54c3de6a84fafd320a3cdff25b5a74bbedf10b8da97e8266ad7d6efd91451b5b0aabe53eb9f177be9b05466741371c7ad93a041c80181d15602cff6a922af8722a3ae7ee61b6299243957a815ca1205c0969e27675", 0xae}, {&(0x7f0000000300)="54700393bb659dc8a41b56d451d2c316a652f02e26bae38919bc02deb0a335bc01dcf281559233b32029d8dad89294ce7e2db785c5d7cbf1d85b659170238bd35515950110a8ed01e1f71c49b2b9fd6b92512b703e09aeec5b1a0b1501c23bd4a862705bac08ded9ff21f10a361094d994aa768ac74c4c886ad7e71b5f74fcd3a9c5fd8a04560ad89d956ea99700d44c755af1738d355bef9499895d803a72d41bca7a867c2a2a77f9a9", 0xaa}, {&(0x7f00000001c0)="5128e79727ee3234f695c7296a771a1e253db123e1d2ffa3", 0x18}, {&(0x7f00000003c0)="780210be8c3d7b5dfdc33fb95c9b5021d38e0f5b417830357cef1fdb5dc0c99b0921e4b4491efb0f96a9c8cef77e78203eabe016f83c59296aaf2185f08e10e745260ce718b06718741374c9db379900cedc24d5d92548335259b47f5354fa0f1dd65aaab909069cd6b974392971c7527d51c7c5a0e460bd9c5b02b9b7e3db0fa88238c78ec5", 0x86}, {&(0x7f0000000200)="fe7d29759ae9865b9c60fe10c7da53d024376b2769842e3cad6f905789d0f76d6fc42805d6314b63cfb6c264971e0ad9", 0x30}, {&(0x7f0000000480)="cb7c8321f6afad3471a0c5ea4d75f832a8f4e3e5794f7634023e52df02647859ac6893d4888a86455f2f4f0252528016148300bc6b7d986138f421930386bfc32ee1b3c37552338374dbc42db503c16cbf7c37bf80cdb2c3f1000e647748b7614bafc7b6c2997663dc4d82e526644cd48dfad083a0a3e63c2d194a003b465e88df047dcce31d156410f56f64654aa27ce0644afed850b4b6659b161495e211050ef792a3acb31adec750e4e33999c1f6b66fcfd44922f2dac2", 0xb9}], 0x6, &(0x7f0000001b40)=ANY=[@ANYBLOB="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"], 0x180, 0x40400}, {0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000900)="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", 0x1000}, {&(0x7f00000005c0)="68fafc5eba47c9dbeeaf85b6daaf72faecabbc457cda75f004d06e0016668f6fba059e1d1a89456c44e622f3d658a313149dbfd1a98c9f0fdd9460fb255f1907c929312f65269af155ad0733ddb1fd339e1e4fd694c3ff77bd740077eed758b36bc5cd0b", 0x64}], 0x2, 0x0, 0x0, 0x2400a010}, {0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000001940)="ee9b4f4ad9eccb2d21743dd1a3d6d6ce4d089da7bf9cc7d564db187a446bf598dd17d261ca353b4924b2816b7232202b95972c48aca6c76a0bc8926459eb84d37a93a93cd829e8b51b95fe8b84c326ec0414175bed2eac708c27cded8244697a3c8e328bf55eb59e1908732078254ca7d220349bcb85780f059d0ee189a6067d0b9566042b944fe3bf1fbc46f1ab", 0x8e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000000000001701000004000000020000000000000018000000000000001701000003000000000000000000000018000000000000001701000004000000ff0f0000000000001800000000000000170100000400000008000000000000001800000000000000170100000400000000000000000000007800000000000000170100000200000063000000ed92cb9be9b8e33cfabb96ba1981fc5079a0fbb48cf049f5775d3e40c6c1b22e20e437f5481f890d20f6f60c9656b5f7af94660260807b71050947c3a843b35ad2ef8460786919c408dd467ce529acf9e8d7cf782835a3e4292c354c06f1486c23875e00"], 0xf0, 0x40}, {0x0, 0x0, &(0x7f0000001ec0), 0x0, 0x0, 0x0, 0x8}], 0x4, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80000000}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) r1 = socket(0xa, 0x2, 0x0) r2 = socket(0x1, 0x4, 0xd9) close(r2) r3 = socket$inet(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000680)={r4}, &(0x7f00000006c0)=0xc) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000080)={r4, 0x81, 0x10, 0x2}, &(0x7f0000000180)=0x18) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000040)={r4, 0x3, 0x9}, 0x8) write$cgroup_int(r0, &(0x7f0000001b00)=0x3ff, 0x12) 03:20:47 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) write$binfmt_script(r0, &(0x7f0000000540)=ANY=[@ANYPTR=&(0x7f0000001100)=ANY=[@ANYBLOB="e968be7e9253090eb58e08e3be8391d53a1cd6f10190bea9ff7c750d70457d5d522e5ccf1a7b8a54c6befbaf7de2ab198d320d5e928929b8612ae56f8fd1e559a8446d82f355a9316530a769fb0a4f66c2ca66e0e876a79f5cf365e6fd8f7c671930be26f9813c76cb8ffe02ec03dcde4173a7f802f94c0384547be4730b3f9ac2f686909df9b21d", @ANYRES16=r1, @ANYRESOCT, @ANYRES16, @ANYBLOB="4c4ef607b511eb01a5c981b00bafa63aff316e1ccb08d03452fa5248f5fa19fed87fdc8adf76cf335f22035c40cf8d8abb0a88a8e58edfdc08c51d7d2b3910c504ccda6fbb016fb2fa92d84fa7cc59058074e342d4a567db33d3e5fb6cc9f5f91f64770d4e45abda5b00fd989358ff542ed13dbd6e429ef5bfa223a8951476b161c5bf461bd42484d39167bb6d46d9d410cea4c6b29f167cca6f7a02002452b7b1b18b4182f04ec4dbbd80736cbea4965fa633273170a62d44f11238e2031d42e0cd8d49eb95bfd36a555121dddacda616c46e5db3a36bbb390638966efd6ae6f0134669afec0ad4d1d602c26ba887cd94d20fee4d30a4e856d992f35d108ea8665d129c18be9aad40eb51e4873435f54d9be30bdc418f2f7e74341613bb761472f1e65e92c65d39b522c251ab1db3ae95e8fb6d750b1a57859a8c0efdcc247fea5734b00c1c8d4a6bbb6a49df68bd5b4cff26e5c423f0ed1d4c86b4c00f8fce8caf195867e434a622602990c12e8bd1e49231f1a0af3dde33371fa2bc7dc2793197396f62f2d08037e9fc1cb2ef8ca4028a86f67f410b7877dfa856d9cd950fc899122b10b811f70305dbfd5230c90fff55735d7037312c0f485b375882ab4cfc622d8ca331aa765a792dc44c45a5b4dbe11dafa51aa16379d1459261d7150293e1271ac6c1c8b82a8c605fa5d739b5efa636455ec2c54ad7fc98e8b06aed8cbb30f87ccd76df94d040901de69d47b4adf4377200c28bc8b01248f55b2cfcd763eea2680749d5b433004a199c7866adc719b8b0fe38f98b0e2d2008c1185d2f3fa589b9acdc0af256ecb0245b29113c001db653f20e36b00894b88b31657b09aa4206dbf6af2495b79ffc916467498f00facce560381987a074a81f8adb2c6450c11d116870e39c0037945f724a077e83ba401ffe42ced84655672855c3b49170dcfa42f8eff3060a502e4f2332d31584acdbe6d1789345cae80148c64729e9737662c2a21b128d2d0ce0ef8f58d7d91d39209bce42266a197e22c3d8c2f7067a9a283984c99e74f5e18db3d93aab25d038a7d9b9dc3e9328a58e6183f88feb667ae7b836ac86a107576f05a655004d33ee582aed74a32485e279722104e027823a3d2308bf95f61d023325cf28d2129cd24c560b73040ebb6c97b816075e57c10d82679d090dca6210f08cb149e6f2024f93d7e951c460cbe8df0d34e9d1789a13bacf128dbb779b5a7940bf675ac8a48e4ee31c86dea30aecb5104dda7bbc80e7585fabbe71cea963c6543c3d89c24c4c2e921c82c768378d46912c96caf2d6b86a4c3b8c8d3a93b09e4690121f019097c2be65e8dd11529004ee5eb3015fc59e0543ca051eb6a5f478c27652190e7ca5680371dff946c54cae9d6c51d1087157a9838e9ec35e53159ad5b36466f9910091a87b8f4116539d3867806e4a74bee263b791cbd3429804a2e0914d078e40dad758f068d995e9628ec78852a1fcaf607bfb5c97eafd9eb3a6c5b8c6b8bb099feae33ea9230fc7639595fde52a66f3c3ec1218d42b2f9b1bcb3d9050bc4dfef753e0296353e4c7faf9a1f69fd5a122fbcb614dc9e695a05b06c6ab7c9e7e6cd285ba929e556b89e44fd46cbb3ebdb747f6562df23a12a454055288b38842d538985797a54980fcc96b886d996dc967d606db6f26751e55e7b1a1ba3dd2cb108c0b5c5a713c95ce4c3bcfab0c1cc9449773b86e8a7e94b14f226955a84202599183657be48cbe2b4e14039da2b769cf99b6d173547cfa7d59ac20e774cf55c3b177a7c55c7709b3ba3df09867f6d7d68b438a976f964c6782ed5c9a5484ce219ac9353025109e2a994c6928ba377b05a39c7a7302f506a2ca511d205f2cbf36d0fc493d8301037cc0767f88afcd325631d96eacdd1e18f155166ecfa90afb9e9b9da5ee566753d42a7c4f351f3b23c7e6b08a8db0055a3c36009ff6f7ec08907a26b8d5f0ee6c771ace27ca8ba420b9aaf58d7a2894736ebd0a1ffc3fceda90039d01c93101f67f3c0d1b5ae60b4950589f3660a470ab91ed551cd1538b7018faadf02c3486400634f5e68b8cb56ddeca5c1ee916e9d8f0488dfb3606d4c058937a903f4d2e8880675f6f44d164c3e9b2f12f23edb23521f1a35041276504b6fd2cd2543bbdb487c4ebd8b6b267a50d2dfeb33452970bba5101ce03b769866e984aa9727481e9dc6c704c0f9bb3496c26de943a4edcb693a35cc2bc41c9b4206ea60e5a6d49bb535068be6ff1689d17e0538ae800e2551917952ae4eea95e33e8d955feeef372b62abc97dd191dc9de02522f71c299ff57760b0d9d3cae7cfd9f3ea1f26645eebdcafe88f198f39c690b768250bfee8c201edf87ee8347adc0a38d33379e375bd60352070427a5c19e7c16b5d6f5609d114a799d6b17340941a438c999b48937a68a8e4cbca7f5ae6be45cfaba13c9279c0cfba063290b223f6385eebc3f8272bd401cfab675c48c074eeaa7837a60d2dd85bae823cc143afb810988d56d6daeff8d7a10eaaef1ccdabcd89cf9c959129b3966a616897d7732198a592570e86558f621adda1f81ae1de151b834f1093238ffd5c6f4529d0ddbf08c5978c70d0705a7a7fa6573ab984dd6401a63d667c614ff714f323f472c4f8e8819e7600a951056072d92dac680ea777271c4943a5bf4a48656ec61e83f64a73783558261c399a3df33c8d4b7b31f9a19b1a4e86de8b90fe81ee81d572a6c6554b30651c36b4d979e6737bbb69ddf9912391055b729b0ed7122b00f22445c3c22040c3d4935c78e99afbca73bfbeff12ec6799e0fc56ea72a8543a8af8528919d31eba88041416b33c62c074ac4cc35f1001650b2f030c75f193985505490a550b3d98470df0feaa114ce2e1664929bb76a2d4619ff9b55aa4b64761e0ac788ac05d080095f479020f132ccf65b428e37746f0e49d8aee5f158b3afe0d941987190066279899a986f1997591587bfcc20af462bfc2ff9a8f7e821ca7861967aa99455208aef8affd828029ae554594e41bc6b7e6cc5e711240be5fb6134193420e4e5457d17c765f096f19fab5565423b72d13138f467f5669c749288d822c5a8731eeda3c03921cd571051bb6f0ac0f03cb4e8a7dc82e3c18256e11ae986b8ee112804c86d536d854e3cced90047af6b93c7a53da0abd29c36eb6a23389b2d92212dbf8dcc906d301b1d364419909e14edf0da35a06021f2224974b40a685968289e4eac89f383cf6440df46efd0a65a27a93a22812989880d2c02385709cb65511fb77ec0892aa166f259248aee2383661999a8a66b4331831b3eee36bfc87df4b4f2810618cbe0a8ce773be7282b3ff40a6635570f548093e6ab931108c955f51db4d9fcbc73b8e2971297531d6f16a35daf332628f1a6eeb17f12176ee4a7662d54e4c4bb09beff2b66a97e166aed54d6ef77b6169c2ce5e88fad8745f29cb439de383e9b0fefcb0f1f2bd6ae62e00b4a86b3b8c0aa710097577d0bfd93d9d79dbf7eb7328a11535d1c610561f829b3a5625fbd11d9c371b0240e3da77f32c0152869d7448b05650ba31e42d3b5df36099ba846db798c18397561b17fe5521a3fb4458237fe8829deff1293a47b93797e55775d7765a580746224a32bf2ab6764f26fe910c33844b467fe27493891dff02e7ded67b3afe40ea2de4d1c8c556f0f99dbea119f095e8a6502ba6bb0c8934466e2b1cd78e4192d1fcbcb8c79df19797b454441b1694fc2fc1025adc034833c36b3755167bf1c58b61d5edbca74e623670e7bb748e2d8baa8da54a6a6591675762c92aaad6272ae0b3feb1787fbf4b75078124f86b6c43efe166c5466a1e3df360e32e693f711968881c15057f6352cd5753eb898d3739a7cacd7593f4f4556098466c95795f64ebe517b3a81dd0ff8237a26230270b5115c797480e3f104f14e1cd1ccab277af7947b40087b29fe24ad5be167a9d19c6af4e46c716f220703e790c765f981df0bf8e9984c938cbb7d46c3cbcafcb4e14e4e636b529686720ca2931bbbacfa24afd7a09a54db59be9e7dfb0d5a97cfcd1b53bc6feb307a4649443a3b0b04c152d23f6f6b14d4d867e1f1f0d6359cdd25f9740e9c72e7a088539bfc6ecec9be9552fa541af01211533abaf63da0f3cdb2767d400b825f318e80cc0e7abfe8cbfe16a9de991c239a0d08f67c455d8a5630e9eaf26716567c065aeca78866d0199d6fd2101f36aa5cbe97b932cba69f758f242ddb9e3066fa54e45ffb9e2f5e8785f2ac931bbc00a67d993acd406f8757c05cf83d67e628d6b3fe70d991c34fe75844bee3bf661c972ae22a8cb8e0bc76379a226a2aa3e8867384d7651c8cd8a968f4e800e2ff4b47bfc6819ec351764cdefc6dfe4a907646321edd04d5a48e6e64065d8b0aea85579c9b7679d7a6c11106c7ce1a734f3412625947c4d686e7b008427c043b543e4bbafa8fc7723a942e9f52e4d314e7a74d57bd584e673cda1c51881d17398e1d4e057bc2850d32060e73fc51219d5282f10281b8a75ef14fd7dc5555ca5c98d7ce40275bb62019c847566319634a4ae5b6de73eba74abd42a4844fb5b67fe1f66ff6819f31e93acf1fdb9a80f7bddf6a2d98f54b2f843265bcce45418cb669a54c1ebcf3dbb3e61236412dcc013ac115171bf3c6cd78edd1fa06cc9ce354efe11c8d03778228177a1326575b2b382608ff7661f15c734bd8ce0dbf1be4ba819a1eb349fa161db55f4b44e4a1c05a224f909dc84be7671be76c9b9c4de838cc6d853f55980327d8144380c080d10ceddc8948eab7474683ce3c099a430f23ef7832360fb5282b8057831bfd26e875ab76454ea18a572c6bbb7339983c7c1fa77362cb9e81231964f0bc6b9feb896ad0158f5ba70edd41b92c2abe4b9deb7678ab40907f7cc502f5c01df32f11c4b68d121d18846297c225db1b1995d385771e234c98d063c2dce79b689df85d512866817fc3927e0effb2f96572d5ee9ae8d0f1bd6852eb89cf770018324c864d0e169a33cdeaca6d9a9cb2104dea0c661e5e5b222011700b2a024402e4f0be04faab6be87679aa00e9f8311783f8687a61e282c6972f93bc0213c167f23b9aba14217cee02124598467c3ce53df178bc7c5ac8cc29d8968b57ef72a8c994dab4ce60a32084b02f29c777c06d883ea440382985076c73776f2703fa05d62b056db20b75ecb60e75d2b40329bf7803fd09e8c0f2360cd03f4ea9a3b89a6fa796870d95eea681a8a256c8a7d354c3c92bf674f027b12ad221e68403cb33f28d66103baa8b0e9ad743534ce9a6c95f6f334d19f5d9cd17a84bd4d156537b6efe68e76c1f6b7a09f11ecbfeb704ecf1bb1097e045b586fa86178b4105c16c61c3f78bec6ac2f43f20fa4a7a1f4fdc6e8717e3e6e5e4da5b28a1ea8763e30874674e57b003153a960cb9bac96da6c85199a73de5f01a626a16aa933ab8180cb203f0265acc101abce35e18ee68cf90ac34c75123ba6d9baaf6eef87f59b37e130af2b27d9172e4bfefa50e7828e9787465782ea3b07c3023fc325841428ae6c5e36adc664029fb685dd0ebbb00d107c5f210c0ef4c2a2935b1259387144f6ea41ac3572b385090fe57b7a76991105337bd8fcf537a1b2dfc19acc92fddea5315439a38e45079709ce2196769523fd4cd359c89ffb3ddc21e50006fd3a36dc1c68658a9f88f3b276ea2ff783f8dca8d13aa7a878ee08136188a14382fee746f8cdc457b67f5d5102e086458456e2f80b8ffaf6e0498ab5373bbe6fc3f3a3c420c7f4cce70", @ANYPTR64, @ANYPTR64=&(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYBLOB="6fc2868929c7806d542ad335b77d39b95aaf7ffb2a", @ANYRESDEC, @ANYRES16=r0, @ANYRESDEC]]], 0x8) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) r3 = accept4(r2, &(0x7f0000000440)=@sco, &(0x7f00000004c0)=0x80, 0x800) setsockopt$sock_int(r3, 0x1, 0x1d, &(0x7f0000000500), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8010, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="a8690000077fee0b7d1641973d8473f3bc492ac70103000000e100000002000000000500c7ae7cdc47f4fb068f2af3b7116c44f3a5c1d606eac12ab833df7e7498b73b534894fa5c8f1cb092963619ed69934b30fd968e145e8e99e2"], 0x24}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r6 = socket(0x10, 0x80002, 0x0) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x4, r8, {}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffe0}]}}]}, 0x38}, 0x1, 0x1400}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@getae={0x58, 0x1f, 0x800, 0x70bd29, 0x25dfdbfb, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d4, 0xa, 0x6c}, @in6=@mcast1, 0x8, 0x3507}, [@XFRMA_IF_ID={0x8, 0x1f, r8}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x1}, @replay_thresh={0x8, 0xb, 0x9}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x10040004) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r9, r4, 0x0, 0xfffffffe) [ 953.570312][ T26] audit: type=1804 audit(1586748047.219:690): pid=8710 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922123606/syzkaller.TgTSaq/688/cgroup.controllers" dev="sda1" ino=16017 res=1 03:20:47 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffea0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="a000000010003b0e00"/20, @ANYRES32, @ANYBLOB="000000000000000080001200080001007674693674000200700005000000000008000200000000000800030000000000080006000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800020000000800fdff030000000000080004007f000001080005000000000008000400000000000800060000000000080006000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000d38f8d9daf309bb40c0ad71d66d591d0ca42e683d83f5878f44051d3352cd4d7e76c0900e54b7f28ce4c2d6495faf1990be4ceb3211f2856a6dd3b4a9a9ff3eeb4d244057bbc218e27360b6c0bef99a2bf1ce94346933e3400000000000000050000000000000000fdfb809223f13b02ac3703d96f3f217ded2cf92881ca8185d03dea3178788098e0c05b075d9738e340b95f891b3942d48ff1087587690e0641f48717c50f47e782469cb878d4d19801479cb1"], 0xa0}}, 0x0) r0 = socket(0x10, 0x4, 0x9) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) [ 953.694403][ T26] audit: type=1804 audit(1586748047.269:691): pid=8710 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922123606/syzkaller.TgTSaq/688/cgroup.controllers" dev="sda1" ino=16017 res=1 03:20:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x14}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) 03:20:47 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x3000000, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:20:47 executing program 1: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) write$binfmt_script(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000009c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000a00)={0x1d, r3, 0x0, {0x0, 0x69d34f065581c02c}}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000000)={&(0x7f0000000040), 0x18, &(0x7f0000000b00)={&(0x7f0000000a40)='p', 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") syz_genetlink_get_family_id$nl80211(0x0) 03:20:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000100)={r2}) r4 = socket(0x10, 0x80002, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) socket(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x4, r7, {}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffe0}]}}]}, 0x38}, 0x1, 0x1400}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000140)={@dev={0xfe, 0x80, [], 0xf}, 0x2c, r7}) write(r1, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) connect$unix(r1, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x7, 0x1, 0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 03:20:47 executing program 4: getpeername(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x18, 0x1409, 0x100, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x4040) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) ioctl$SIOCGETLINKNAME(r6, 0x89e0, &(0x7f0000000500)={0x2, 0x3}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="2967138b9678c0247dfef930a3c32284beb55a0bda82294982a16bb414427c01ecd35428550000000000000005a95b9dc1ed091cf579fa9d010000825d3317295f6580e8b2623506a8c8251a69158200000000f56bef6fcdd9"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000004bb1f4cdbad7560c4e191eb4fe21c811284ccb28246f2f705c767ae6317a282c14f19bf3ca622af81b3495da87a023fda3ae5f930faa28c1fd2974d4d27c97e43b1a2b3f838028e08442f4f18263504ba03bb52142dcfababc23c396ba29739174dcc6c8fbf0ebf28c6882346de6a1b466bf3d"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0x8}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x4}}]}, 0x34}}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000480)=0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000580)=r8) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0xc, 0x0, 0x0, r7}}, 0x24}}, 0x0) 03:20:47 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x4000000, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) [ 954.082679][ T8747] netlink: 'syz-executor.2': attribute type 27 has an invalid length. 03:20:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x60}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) 03:20:47 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x397159c7cfc62e5d}], {0x14}}, 0x3c}}, 0x0) [ 954.128738][ T8747] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 954.193910][ T8751] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 03:20:47 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0xda00) accept$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x44, 0x66, 0x8, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xf896ae60867f38cc, 0xf}, {0xffe0, 0xb}, {0xb, 0xfff1}}, [{0x8, 0xb, 0xf8000000}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x94}, {0x8, 0xb, 0x9}]}, 0x44}}, 0x4044800) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRESOCT=0x0], 0x17) write$cgroup_int(r2, &(0x7f0000000200), 0x3fe00) 03:20:47 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x14000000, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:20:47 executing program 2: sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB='h\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="0000000000000000f1ff00000a00010062617369630080240001000000070000000000beff3b05000008babb3b98e42580e73fdad88e139600000008000100e7030000c2dc66a317df019f1f3cdfbd7cf99b04e97e270345f8d6773e9b83cc56f669802b77a232f0c50045e17ae55dededc8280a1c5f8242db5bf78d020a2281b900"/142], 0x68}}, 0x0) r3 = socket(0x1f, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 03:20:48 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000100)=0x1, 0x4) accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, &(0x7f00000000c0)=0x10, 0x80000) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x1cb) sendmmsg$inet(r0, &(0x7f0000001700)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)='f', 0x1}, {&(0x7f0000002c00)="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", 0x594}], 0x2}}], 0x1, 0x4000000) sendmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)="06", 0x1}], 0x1}}], 0x1, 0x0) [ 954.378281][ T8765] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 954.421365][ T8765] File: /root/syzkaller-testdir080444537/syzkaller.UzUSE7/697/memory.events PID: 8765 Comm: syz-executor.1 03:20:48 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x3f000000, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:20:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0xf0}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) 03:20:48 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x2343a726) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000000c0)={0x8}) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, &(0x7f00000000c0)) 03:20:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540)='tls\x00', 0x4) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x0, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x303}, '\x00\x00\x00\x00\x00\x00|\x00', "b19c965f3fea724835192913b40bae1d", "3faf4d7f", "c6ca89e4e891a86b"}, 0x28) sendto$inet6(r0, &(0x7f0000000180)="8e", 0x1, 0x4008000, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x2b, 0xfffffffffffffe7f, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001fffffff00004000632f77fbac141412e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x0, 0xfffffffffffffe09}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x0, 0x1000, 0x1000, &(0x7f0000000580)="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", &(0x7f0000001580)=""/4096, 0x0, 0x0, 0x91, 0x3, &(0x7f00000000c0)="21c29be32fc5b0ead58f6c3d69a6841a314eb4e73118e02a1dfe685a48dccff6500a8d70c08d618fbc0ac35f2597b3b01c904f33d10aeddeaa5ddbd39fca5ce2e082272c68580482c2084eb0fcbd3e1915f1671d038e2dd317d42be35a9784c3c7c27e5889d5e8f41fd2863d5e90646298e6557bc13df90765067cec4ea4ad62c94ca39caecb691eb6561d23a8ee180509", &(0x7f0000000240)="872938"}, 0x40) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffff7f, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendto$inet6(r0, &(0x7f0000000080)='>', 0x11, 0x8000, 0x0, 0x0) 03:20:48 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000040)="c72e2a59ba8c0a", 0x7}, {&(0x7f00000000c0)="f0c89d063d3ebd09c9b102ab152405da2cdb3e549552a909a0ea8e44440291af8208299da3b302fe", 0x28}, {&(0x7f0000000200)="80575675d762193a007d4f81389ee991847563eaf943d0c41967bca54de3f8a00ca3bcaff32a16b60dbc64a111f8dd286871ca38afd1cb5ec6306fbfbf152ebb894dd0c993e73076f9a3e970b13367fd4f783a15ea967d594b9a59afe38f19d70e70ddb0e276107d5846908995df95ddaf27aab8bade33f7aec79cb1bc7f7a8fd2b2e081d97dcc4c7bb49d47ff2ef7a1e808246cdda7e65d35c880431ef16a1a495bec73b3c35d5bf66d5aa16f", 0xad}, {&(0x7f00000002c0)="4a7df03dca07a0c8c0627fdef133c4ff7e9515d5a8db31357e6b6ab833a52e49c119cb6cfc1352b31d9e3641a13b347e68a6707b56dc6f292939146a8f76ff4f1e176472b7cec7ac467e522dbfbff16910251e1163aef752d4af0688495c56b80abcae922dd0d5b769357b07c791cd5e0374377dcdcb0f1f3b6702324eaabc674b38b588fd3858bce08747734ef1b682e21edf4bbb95a20c8ab567d856e74e51a209d36df23637021383fe8896", 0xad}, {&(0x7f0000000100)="e50883", 0x3}, {&(0x7f0000000380)="9440f2955d8277254dfebc99104a430a19e998ed0473f2d2fa40a72640e14cb0d51cdbc60cd25b0f4a43437b69cff577094a63c381aa6e90cc416c0240f32445575aee143d827528ef85947a35c2801a03fa8275e6a4d1c330000a35e8b2817b7a5f84cc12b5d1df6d9f54a8233e928009b8a8c3f513084570166ddaa27fce68c1e5ccc93f06013bc0dc8bbbb8ddfe97c2ea6cf658ba096d139229901d138b75cef56fd43c576bc3f6498507daa9002c1505eb1381e9999a61cc845b6f", 0xbd}], 0x6) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x40}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) 03:20:48 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x4b090000, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:20:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x140}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) 03:20:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x8, 0x800, 0x0) r2 = socket(0xa, 0x2, 0x0) r3 = socket(0xa, 0x1, 0x0) close(r3) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000680)={r5}, &(0x7f00000006c0)=0xc) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000080)={r5, 0x81, 0x10, 0x2}, &(0x7f0000000180)=0x18) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000580)={r5, 0x43ad}, 0x8) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000480)={0x18, r6, 0x703, 0x0, 0x0, {0x4}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000507000500"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468000000b31800027f1400010000000000", @ANYRES32=0x0, @ANYBLOB="00f8b200614de7b76b4710fba4367d53e0a67000fa230000000000971088ab000135ff054682c593d8799db542813eecfd28c99d7a"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000006e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 954.936363][ T26] audit: type=1804 audit(1586748048.589:692): pid=8808 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir055243180/syzkaller.BBU39k/719/cgroup.controllers" dev="sda1" ino=15825 res=1 03:20:48 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x58000000, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:20:48 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240)='gtp\x00') sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, r1, 0x4, 0x70bd25, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_TID={0xc}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_VERSION={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24004801) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x4, r3, {}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffe0}]}}]}, 0x38}, 0x1, 0x1400}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r5, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r5, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r5, 0xc080661a, &(0x7f0000000000)={{0x1, 0x0, @descriptor="c1e6d9622bfbb3ba"}}) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f00000000c0), &(0x7f0000000100)=0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400b6a00c975505464c999a00540000000000001600000000340001003c00010008c7fe9ff0000100696665002c0002801c0001000000000000000000000000000000000000000000010000000a"], 0x1}}, 0x0) sendfile(r6, r4, 0x0, 0x100000001) 03:20:48 executing program 4: socket$packet(0x11, 0xa, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0xd3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @broadcast}}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'rose0\x00', 0x600}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000002600)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="eba700000000000000000a00000008000300", @ANYRES32], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x64, r4, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0x61, 0x9, @link_local}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0xfffffffffffffefa, 0x2e, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x0, 0x3c, 0x9}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x444b}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x4008054) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'ip6gretap0\x00', 0x200}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="008300005dff6061a6a158812f00fe8000000000000000000000000000000000000100"/54, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x46) [ 955.364085][ T26] audit: type=1804 audit(1586748049.009:693): pid=8845 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir080444537/syzkaller.UzUSE7/699/cgroup.controllers" dev="sda1" ino=16161 res=1 03:20:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c00000011002508000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000005001800f58d000c001a800800ff7fffff0180912080c624cfea954c032a9867e44c0188d00e9e847154ff7900de5189250d05cbfcbca100cbbece184d569f270f8e2507b92d150f52b4eb2735ed020947c7ca534f869f80d079d796803de292b9da0ce0dbca14ba8f3ab3a6ea0841e700ecb016eb8e3868f87e7e09e7036e8f07e8dde90c3ceb0a81be5b9b6d28de8ef283da3479a246e7f7445c150984683fe76f4a4ca271a8167dfd17f227a45c1846dae3eeeaf18d3fe2b99bb013a15d0681c4ee3d8f47e041e12f278e4362dca1cff78455f4f8d4ec37104b2871911ff823ef71314afd2dfdb8b8b8ece262ef730f43d0380d059f01238ee4e32ade4945bfdefc1b60719830759c10f5fd0686673e72af7d11c4f0979c6e23ab443c410d7bca5ceac34e19055e560f3c5156b796b6db2a52899780cdd713ca91cdf74c3e8fa134ca2abb7b7443bb80c3307b536e545a0500b9c143876fe58dceddf7fe34d475e5a78c69943fdee5b3d676a2c3bca668d19c9899fe58e8807093c197e4cb6fa2d46839ab3dac578a29535f032454"], 0x2c}}, 0x0) 03:20:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x300}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) 03:20:49 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x9effffff, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:20:49 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x3, 0x10001, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r2, 0x110, 0x3) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x9}]}}}]}, 0x3c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x8001, 0x0) 03:20:49 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0xf0ffffff, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:20:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x500}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) 03:20:50 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0xfffff000, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:20:50 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX=0x0, @ANYRESDEC, @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYPTR64=&(0x7f0000001400)=ANY=[@ANYBLOB="724e3aa2763ca49fb6c6ca735fe7526024f0ee98a3738cd0a6c47b2e974aba090b1f46cdb1ed7d7e82eaf8e3e027a4b3ce22d64edd35c4ecbe416d74435f63b1bf06486b87fb5d404d403429cbd2595017f5b25f95c9e3b25eef03d6fa80fc616be2b06fea09b971198c4e3cf7aad9ca15cd455f81ea7937e9875f7fe3033a1de5857ef67c69877a76646b4db8e911c89fe81c0aac2c33de5283fcdf82ccb1166986e5e6a347043112c5a959a2a2bc75e772b891b5", @ANYRESDEC=r1, @ANYRES16, @ANYRESHEX, @ANYRESHEX, @ANYPTR], @ANYRES32, @ANYBLOB="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"], @ANYRESDEC, @ANYRESHEX], 0x54) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000000c0)) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ffff0900000016000a00", @ANYRES32=r6], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) setsockopt$inet_tcp_TLS_RX(r7, 0x6, 0x2, &(0x7f0000000040)=@ccm_128={{0x304}, "5ef62a738d3e6b8b", "0173593e7e001fbfa1b3eadeb4ae8a3c", "385cf16b", "10c06a9ccf0b0b53"}, 0x28) [ 956.596726][ T26] audit: type=1804 audit(1586748050.259:694): pid=8892 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir055243180/syzkaller.BBU39k/721/cgroup.controllers" dev="sda1" ino=16162 res=1 [ 956.634948][ T8892] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 03:20:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x600}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) 03:20:50 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0xffffff7f, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) [ 956.715617][ T26] audit: type=1804 audit(1586748050.379:695): pid=8892 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir055243180/syzkaller.BBU39k/721/cgroup.controllers" dev="sda1" ino=16162 res=1 [ 956.758780][ T8899] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 03:20:50 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0xffffff9e, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:20:50 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x4, 0x0, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)={0x24, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x24}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, [], 0x35}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008045}, 0x1c0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x12a6, 0x4) 03:20:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x900}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) 03:20:50 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0xfffffff0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:20:50 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) shutdown(r2, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.stat\x00', 0x275a, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x24, &(0x7f0000000300)=@assoc_value, 0x8) sendmsg$inet6(r5, 0x0, 0x4000000) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x2012, r4, 0x0) recvfrom$ax25(r3, &(0x7f0000000180)=""/144, 0x90, 0x41, &(0x7f0000000240)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) 03:20:50 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x3, 0xc72, [0x0, 0x20000200, 0x20000230, 0x20000260], 0x0, &(0x7f0000000040), &(0x7f0000000200)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x3, 0x4a, 0x9100, 'ip6gre0\x00', 'ip6gre0\x00', 'vlan0\x00', 'ip6gre0\x00', @multicast, [0xff, 0xff, 0x0, 0x0, 0xff], @empty, [0x0, 0x0, 0x0, 0xff, 0x0, 0xff], 0x9e, 0xce, 0xfe, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x4, 0x1, 0xf8, 0x4, 0x1}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x9}}}}, {0x5, 0x44, 0x200, 'macvlan1\x00', 'veth0_to_bridge\x00', 'erspan0\x00', 'bridge_slave_1\x00', @link_local, [0xff, 0xff, 0xff, 0x0, 0xff], @local, [0x0, 0x0, 0xff, 0xff], 0xde, 0x10e, 0x13e, [@devgroup={{'devgroup\x00', 0x0, 0x18}, {{0x6, 0x3f, 0x9, 0x6, 0x9}}}, @vlan={{'vlan\x00', 0x0, 0x8}, {{0x2, 0x5, 0x883e, 0x4}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x1}}}], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x8}}}}]}, {0x0, '\x00', 0x2, 0x7ffffffffffffffe, 0x1, [{0x5, 0x0, 0x8035, 'veth1_to_batadv\x00', 'bridge_slave_1\x00', 'dummy0\x00', 'wg1\x00', @link_local, [0xff, 0x7f, 0xff], @local, [0xff, 0x0, 0x6e84300a44b613a, 0xff, 0x7f, 0xff], 0x896, 0x926, 0x976, [@u32={{'u32\x00', 0x0, 0x7c0}, {{[{[{0x200}, {0x3fc}, {0x34f, 0x2}, {0xffffffff, 0x3}, {0x40, 0x2}, {0x4, 0x3}, {0x0, 0x1}, {0x2}, {0x8}, {0xf419, 0x1}, {0x879b, 0x3}], [{0x80, 0x3}, {0xbfc, 0xffffffff}, {0xffff, 0x7b5cc2f7}, {0x10000}, {0x9d, 0x3}, {0x9, 0x3}, {0x3, 0xb8797a69}, {0x7, 0x1bc1}, {0x5, 0xf3fb}, {0x58621669, 0x3f}, {0x40, 0x7}], 0x5, 0x5}, {[{0xfc, 0x1}, {0x7, 0x2}, {0x93d, 0x3}, {0x2e24, 0x3}, {0x52, 0x1}, {0x6, 0x2}, {0x3, 0x3}, {0x65, 0x2}, {0x8, 0x1}, {0x9, 0x2}, {0x3}], [{0xfffffffa, 0x101}, {0x3ff}, {0x21b5, 0x7}, {0x3, 0x9}, {0xfffffff8, 0xff}, {0x7, 0x9}, {0x8, 0x7ff}, {0x6, 0x7fff}, {0x0, 0x1}, {0x3}, {0xbb24, 0x8080}], 0x7, 0x9}, {[{0x7fffffff}, {0x0, 0x3}, {}, {0xfffffff7, 0x2}, {0x20, 0x3}, {0x93, 0x1}, {0x4, 0x2}, {0x212, 0x2}, {0x1ff, 0x2}, {0x8, 0x2}, {0x7f, 0x2}], [{0x1, 0x5}, {0x1, 0x6}, {0x5, 0xff}, {0x6cd2}, {0x7ff, 0x8fa6}, {0x8, 0xac32}, {0x45a7, 0x916}, {0x8, 0xfff}, {0xb987, 0x80}, {0x2, 0x4}, {0x0, 0xfffffffa}], 0x2, 0x7}, {[{0x0, 0x3}, {0x7, 0x3}, {0xffffa59c, 0x2}, {0xfffffffe, 0x3}, {}, {0x2, 0x3}, {0xffffffff, 0x1}, {0x9}, {0x40, 0x3}, {0x10001, 0x2}, {0x1, 0x2}], [{0x1, 0x101}, {0x3f, 0x73}, {0x7, 0x5}, {0x8001, 0x1}, {0x80, 0x1}, {0xfff, 0x5}, {0x9, 0x2}, {0xfffffff7, 0x80}, {0xffffffff}, {0x1, 0x80}, {0x8, 0x8000}], 0x1, 0x40}, {[{0x5f2}, {0x1, 0x1}, {0xfffffff9, 0x1}, {0x5, 0x2}, {0xffff, 0x2}, {0x8001, 0x3}, {0x2, 0x1}, {0x9, 0x3}, {0x7fffffff}, {0xf6a, 0x1}, {0x5, 0x3}], [{0x3, 0xb4a}, {0xd2, 0x1e0}, {0x10001, 0x7}, {0x9, 0x6}, {0xffffffff, 0x40}, {0x4, 0x9}, {0x4, 0x1}, {0x4a0000, 0x9}, {0x0, 0x1}, {0x6, 0x310}, {0x5}], 0x1}, {[{0x200, 0x1}, {0x81, 0x2}, {0x6, 0x1}, {0x0, 0x3}, {0xffffff40}, {0x7, 0x1}, {0x810d, 0x2}, {0x8, 0x3}, {0x7, 0x3}, {0x7, 0x3}, {0x4a35, 0x2}], [{0x401, 0x1}, {0x6, 0xb99}, {0x7, 0xa0c}, {0x3, 0x10000}, {0x8, 0x1}, {0x6, 0x2}, {0x10001, 0x2}, {0xfff, 0x8}, {0x4, 0x3}, {0x4, 0x10000}, {0x7, 0x6}], 0x2, 0x3}, {[{0xbe6, 0x1}, {0x3ff, 0x2}, {0x6, 0x3}, {0x1, 0x2}, {0x200}, {0x8}, {0x1, 0x1}, {0xe6, 0x1}, {0x2, 0x1}, {0x2}, {0xdd}], [{0x1000, 0x4}, {0x1, 0x1}, {0x4a1, 0xc4}, {0x0, 0x921c}, {0x2, 0xb071}, {0x9, 0x2}, {0x5, 0x7fffffff}, {0xfffffff8, 0x401}, {0x67, 0xaa02}, {0xd9, 0x40}, {0x300000, 0x2}], 0x9, 0x9}, {[{0x9, 0x1}, {0xf35, 0xe0d5b16fc0813e2c}, {0x81, 0x3}, {0x8}, {0xad, 0x1}, {}, {0x7, 0x3}, {0xfffff801, 0x2}, {0x8, 0x1}, {0x8, 0x2}, {0x7, 0x1}], [{0x7fff, 0x7}, {0x7, 0xffffffff}, {0x5, 0xff}, {0x3, 0x85}, {0x77d5, 0x37c2ba2a}, {0x4}, {0x4, 0xfffffffa}, {0x8, 0x7fff}, {0x9, 0x736}, {0x5, 0x101}, {0x800, 0x81}], 0x8, 0x7}, {[{0x1}, {0x7, 0x2}, {0x0, 0x3}, {0x401, 0x1}, {0x3}, {0x6, 0x1}, {0x80}, {0x8}, {0x800, 0x1}, {0xd3a, 0x3}, {0x8, 0x2}], [{0x5, 0x9}, {0xb089, 0x4}, {}, {0x5, 0x7}, {0x438f8104, 0x1}, {0x65, 0xfffffffd}, {0x3}, {0x2, 0x49}, {0x4275aa7e, 0x2}, {0x4, 0x6}, {0x3, 0xe063}], 0x1, 0x9}, {[{0xb484, 0x1}, {0x80000000}, {0x393, 0x1}, {0x1000, 0x2}, {0x0, 0x2}, {0x101, 0x2}, {0xfffffff9}, {0xcc00000}, {0x3}, {0x6, 0x3}, {0xfffffff8, 0x1}], [{0x8, 0x1f}, {0x1, 0x4}, {0x6}, {0x20, 0x716}, {0x7, 0x2}, {0xf700, 0x9}, {0x500, 0xffff}, {0x8, 0x7}, {0x9, 0x7}, {0x6, 0xfff}, {0x4, 0x37}], 0x7, 0x2}, {[{0xc2, 0x2}, {0xfffff082}, {0x80, 0x3}, {0x6, 0x1}, {0x9}, {0x7f}, {}, {0x1000}, {0xffff}, {0x3, 0x2}, {0x10000, 0x2}], [{0x8, 0x7}, {0x5, 0x5}, {0x5, 0x3ff}, {0x4, 0x3}, {0x2fa1, 0x73}, {0xff, 0x9}, {0x8, 0x40}, {0x9}, {0x2, 0x400}, {0x5, 0x1ff}, {0xea65, 0x7}], 0x2, 0x9}], 0x7}}}, @time={{'time\x00', 0x0, 0x18}, {{0x3f, 0x7, 0xbc45, 0x43ad, 0x4, 0x59, 0x3}}}], [@common=@ERROR={'ERROR\x00', 0x20, {"0c70b4f8051133d480dcd883554b12ee225556c87b99e70e6a60d6c3bad6"}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x67, 0x3, {0x3}}}}], @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x0, 0x10000, {0xffffffff}}}}}]}]}, 0xcea) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0x12, 0x6, 0x8, 0x6, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f00000000c0)={r1, &(0x7f0000000040), 0x0}, 0x20) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) r3 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r3, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r3, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) getpeername(r3, &(0x7f0000000f40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000fc0)=0x80) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001000)={{{@in6=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f0000001100)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001140)={{{@in6=@rand_addr="0cea9fcefd913ec06130ffc2dd31f7cb", @in6=@mcast2, 0x4e24, 0x7fff, 0x4e21, 0x0, 0xa, 0xa0, 0x80, 0x2b, r4, r5}, {0xdd7, 0x6, 0x0, 0x3, 0x2, 0x17, 0x0, 0x7}, {0x1, 0x8, 0xffffffffffff3a70, 0x200000000}, 0x6f, 0x0, 0x2, 0x1, 0x2}, {{@in6=@empty, 0x4d3, 0x33}, 0x2, @in=@multicast1, 0x3504, 0x1, 0x0, 0x8, 0x4, 0xffff957a, 0x7}}, 0xe8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x2b, 0xfffffffffffffe7f, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001fffffff00004000632f77fbac141412e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x0, 0xfffffffffffffe09}, 0x28) pipe(&(0x7f0000000ec0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map={0x18, 0x3, 0x1, 0x0, r1}]}, &(0x7f0000000e80)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x6, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r7}, 0x78) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000f00)=0x2, 0x4) 03:20:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0xa00}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) 03:20:51 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0xffffffff, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:20:51 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x38, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x5, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x8c, r3, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x63}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x180}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x6000}, 0x10) socket$netlink(0x10, 0x3, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r4, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) r5 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r5, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r5, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) pread64(r5, &(0x7f0000000100)=""/169, 0xa9, 0x81) bind$rxrpc(r4, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) ioctl(r4, 0x890f, &(0x7f00000001c0)="080db5055e0bcfe847a071") r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000009000000240004800c00078008000500010000001300010062726f6164636173742d6c696e6b"], 0x3}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) [ 957.303549][ T8932] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 957.410647][ T8932] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 957.547166][ T26] audit: type=1804 audit(1586748051.209:696): pid=8942 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922123606/syzkaller.TgTSaq/694/cgroup.controllers" dev="sda1" ino=16205 res=1 03:20:51 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:20:51 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x8, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x2}, @exit], &(0x7f0000000300)='syzkaller\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 03:20:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0xb00}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) 03:20:51 executing program 1: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000080)="aa59acac539823f8a538feca8e35ee8663c6e6aca7d8a4b179cc564fc02c6e494f5b76143b4f1c8df6db8cb74b29d100a7eebe720068cc1538a0dc76d6", 0x3d}, {&(0x7f00000000c0)="bac72ef284a6d881557f7e220830cc9acff64d3d678279b8bbb4e46902a5123ede5cb768c4c543ab962214a2c4f538de2280fef71df14645e3888bb6dd170081c99cf79fa3021011471d645491ffd433ab14dc8df8cc2ab297cbed9e552a4fbb574fe5", 0x63}, {&(0x7f0000000180)="e0b7cc737d64df5beffe41b8c2e775aa03195e723f6ceaf59a2e430bc247f921de15a9701df15a723720112c2fd987ae9eea104c6c744c7d13e377f65c901956e36c1047b021983bcb1dd9f3f34aef32e158b287eed87547247c87f3f282719b68d3620172827319e2dbd1fa82298551ffb807bd09e864877af4303003c7d16fb01fc10c776813404bdca6ada5ddd2705bb29d27ff4989898557868c9152af8379ce73783d62b8e415ca11ffde60c978029eebe348b155359c228b38942ac375482efb2b928ec98e12a9421333d29d42811096b0411d12ed84293df6fa9d", 0xde}, {&(0x7f0000000280)="12c8e7477459978f63dc69b7ca1771cd0cf457ced43068ec97b675d4a0ba438cda4797fbffeb298cd7d37981094c7c", 0x2f}, {&(0x7f00000002c0)="f53520fc39ae89cae495fc31171a2097c88f53c1489b2af138cba76bc5b6a6b9f6deae58fcfd64ee606c81909316ce5425cdf12e129c90219c6f4e5ce85f33e8969f51e24782bc907ff825f9a7dfc4615dca5f71d49897b9cd1262e42e726671da3addbb50c0c57aee34e56017e4d18f87d7b5ecda4a8866f96edbe047d76f3f0a59ae80c69fcca7b9beab344b4a369c7b2a2e8679242b6fb54ab3c83cd08eb2ca3eaa9ad522c024bdab32f8ec71a7d7eaadd7e643bb00e872e43c036727c1fb517a52ba37d86204b9286f21bacf78eb22678c47e4ed2c18fb69fb05db8068b3a55e1d78e9fb4a2b0a5b3c70eff2238b72", 0xf1}, {&(0x7f00000003c0)="fd03bb8d03b33b2234fc488f2b00fda5fe686a338be245ce8f28c5060697f9163518d009c8dbb3ee775cfda8227e6d6bc2ca64c6e8d86eaa7cd7fdc31e4a6fae2c30a978caee644ebb45ae9942c3231c7ecef4e007e6e52c3d9f2ba765fb7eacd246c37452676dcffdc03e36a1cab5550c02dba37c140b84c3441cd68fcb954ff370d2f2a9c8bb93fe02f41efbfb2432ffbec27ec38a8732c4b3e7b6f02bf1ea4ce379c09b03addd15a4fcbe8a54a075abf5ac1f6137bb4f310f338f244db2c37cb1f3baa6e73084f8a47965e0d3115e6137ec31ec39b6abb486e8ce73b98e9306147f0fa997fbdf7c6d6ca0eb6cf015cc3b74b9aa4e197e7fa9f3e1f00816028eb30d490a6a24b5738ede06d423cf0ca01f8ef4222e77b16a63f77321b9ca8cb8a7ab7e675d8088509fbf754724aae79b5e55c70465ea1d1d8a25e4ef97d805fa26a6cd7eb3efe07788cb5492f27bd89bc4e71e4d6ba8a8db958d469542ae4ca855a16e621032625c219121dc85f8b85b5b10a80a4f9984e91e5706c6f48bfef036f4146e2380d13a69fe12b43e24924c575e325f2b584ea9cd5719eced2936cf90df5fee11e77091f89b7e56410e396d0874f9b9c0fd54bdd9055a89e9c5740e42ae7932c41ceac197800dc902090283422be2ef8b474868c934003c95bfeca8ea9ee69fc71afe8323c6f228213a5433d3bc38ce54cb4629b309e8cb19f36939f8ab29035d17554f0d5cbe209aa2ec254fd8caf43c6310261b65c9b3ab0a12c8a10700d95f32ded82c5e48ee747402641aab64a7d67f3a57c88be2ddd36b8fd5c8775130ff6bc59e863dcb420d0fc1004452b129bb24dfd29b143ece69f778db5652ead2888ddda42425b94792e7adb513892c51a8dfc28b222798b8d69c2dd02b64d984be3d11e0e7c77a85335f4ec855fdddecdccdfca9382d1d5c24ed51c2f6d02920c37a1494586799dd0f0aa804c371e645d43e2410bc9f0079d4eee07f317dc7602690fa15fb10a6243e3ed277eae62b8e3e48e02edd6d0fd95f51fc725535d5aaaa1f464a5ce72ffb60c8bfaa6b68617027f9dfb16bdab61e1a0b8638ac93583b7c32e0ea2572943c6b8f9f5fe5170c61bfac4964829c810bd25e1f9d18097fb225c05bb59f80459cc5096b4ab4d2f33a8f0ae665c0fad1027c087a17e32a55fba2b5fca7c469774ecee838cb4981219f497dea6f92672ed3590f9e750d8e5c1c4d70976eb1a1e9619d769897694b7419493af8409c974773111fa0546092f08ad1302f624a976fbc63bd388c25f2693f6fdc5b9b05ccb7115e385a756e237c90dcbd4585758dbf0fd8fc8815a9141d94c96b56aa219efcdc8c5cb3fda531d3f778369a46a2dd7c86718d493c8fd98716f9ab7a196d02d79bb03d2f086bfe544e0e1083492cef224efdf19e54d188940103f9c813a176d31d2597974f89ca577257988bd74de930f72d53788eaca54d1938d1efbaf080fb7d02df9de10e5e4ad17da96de0e490668314d5e261c8fbf80bf96d2825e99fbcdb5cb2b256e89a71bb548d8e0a2cb322f33dd03b4dd31cf8aac7e8dfb0b0ac3491423822307672857eb79ecdf8cb5088c9754534ed4ed882987f5e97b2d37a55946cb03e399f6a24d44b2812249fe586bce71483ba00c53ac70a0b88f8ee2c754228f2920003762368aa357ae1d9d10ec4211f399fc7204c37b5bc8fe09ab35b290750d7df6894e7a621a7107acfdae58fc43911c687d2837bd63bc1bc6e3b9653239f5d75a1695e45540b8c61e0e8880afbff05840648eb311c0bb9bb77494c463b4fb49425faa9577c188e217a3b54e328cd9b5bc070102bb17ca848774e6305e60dd2a90b730673a933e6eacb96a43abcd45687c739ed881a5ed74a4ef469c6d4114838979ea6a32a3fb7850c199b1da31b5c1ebf4a0b98b5333ff9e5e2d13cffc309e7e12b5775dda8d3042244e99f20e197084883d3442a00024f954c5b5a2794e34df7cd8aa759db13373219171b9ed7fbf30b93a4b4de328ed31f70e702c4622b67e455c1dc7d06b34c61667b432b60bedc8124166ce695a50c4908a468d4bf95472d233c9aa84d2a41828315f99f9fe7412addae30e01ae8ac12174df7ae648d7159785c54ab069e0c54ddf7fa105b2b83680aa8ce21afa6922d97f9e643557474a782d9c8ee62902e4937592442c3645ea9438f72c3d2c2b0bf7617e03fdbcb418d936888624bc24b25f3d5d492304a6183938a001f234d54eca2315577ecddc2861c88fb999da8043a704367b7736619c02b9fa99df35259fce037c1b43b6ae6e816bd6331400b8de315dafe8f7852b68d2e459046cc62c3851ec2ec7fbdc3a566925551ed98e1e7e0fcd0702f0af6ab49f0d884158100fdd6eff473cd512ee48d7c4ff9426d3cba86416425d300b0ff84dd0088c55cb764f996f7be7b4e90354e07a3cd0bb38e705dd1d119ae09ace31fb0bcbbf83f00febbd71881aaded887ab4fb1fa58f33e879198d3350b321e8d37933f666033ff8d38ca1f20eda35b2ef98b7353039c9180633c5c1b067cf53c94f4b98e857e432be2a46161741aa3ccf290e9b01ad34d928aa405db1a50a15213100f3fc424083186bc46f873f0a5ebcae2d8df0bab842d3c74ac2d547d70e40a714da40753591f4e86b77eb66c078b1469831bc12b14cd9550c35f8f50962b57f9416edfda8882db461bc00c61215e2993a2eec42cb72d5a29597fc1d6448bdf541b6fafc5e32fdc4ac2a48277428d49ef9402c3cc070d16720d988e2970ed2e9915042d8266219c587e63e9dde7922bdc52de309961d9a9e336179f1356d9b8224bcdce0e0324bdb92cf9ae9157a4b0aa5815960c763317d3f3b759a5d1e41a4f048f2ce6c65df8799b9897379a03e3f86fbc6d138061f3b40d4b80ab7fdd5210f859e9a8a8db8807a531db9bc3235fd08e62dbb0bfc5aff79e00005c5bcea9a1c1caca028060a9d89cb440a8c2fbca7064ba4562305d0e7eb657549f730ef573b0fa8fb23eb2c5365bf082c8f21866e43a3c079881a257a7aaf9421bcab1cea3dc47ee84dbd343ad31033a5a9123bfbf82a4b9a225ae76b11baef156c3a5f2b493c2111181a4cf8c7ed16b9f98caa7674fb50c57c91da01fb17a18e89103b9e99931f5162603ee4d33c1d3f9105903ebfc4645380f493776570edb3c9374c0706c98aa935de6f86bcfb5d563b8bd6c0d733966aff6e4208d295c03a43ca094892e6d9797094d220b46c00987895f61694847fd69a04c9f5c9e6f9847361ee1e4813518247779f7ea72899911e0cee5f5de040d771905ac5a21533a877fe3d31c8c87a1dbae7b9dc77848dfd9e3061d5a9b1abd098911f87c0ea7e65e35f98e0ad7c5ee45ef69272d9ea4fbb0cd6d9968c6b4962032a1ee2251616c7804870c2072bfba4bc36446b8081f14e6e8bd41b854f61a3c16667849894b53dcada534cefe46c8c2d3ac6bbcaa8f9e97428e88cb949e6e963fbd187cb9d34edc83a33cf50c5608657717a3579e68e61f73a56d3c045a5d0ae3bb54b2acc2126a2567524559db20cebaeb9053376470fd9abd08635e31c562c0b71051eb918b19ee9711887d23fe49dfd32ee332abd44632868f288cf23a9ea41fbf2fa4d4ea7974b7f8766e75c9648b3da51ebf874c80d962fa34c2b1ce79fe205d2d02119cefea99f030c3ac12119bd7bed853cfe4922c308e2c312393170ec54e907fd1eeb0bdfe5622eac8008467818a9415a5df806219f2fec645d86ea6e31d34791e4f7b8e207d92c2af5d3ffbbba993532cfd309b64579a824e6f7a10725be5b8097c6fb4925e03831ff89b9cbf3f14fec9f316d77816998944a8f81fe12a2214fe2e12a5380138c52351ac4905f3746d3c9b41f4ea87773113ef8a07cebf4e51e183b0d042494983f3df39dd276885b5e61da48de426d4e9137e467d309dab0228ba33a38d719b257043460690448e22573024e496ff603d897bc7667ff3df5d4a936549eb702859810861a2926df3f177cefbd377a2f4bdb3aed9adc2b3fc2c9bc4dff59ad266cc6d442b60f68c2de3d77455ac56a764692a5b09f5bc65e83457742132c0b9bc9ac9ba9c6531d194518958770f1e679f69e831a1d006de2903aded169e43fe7333df6950e89dcd8fbd122f304973155c96d0267745a815cae78eb47c146f81e422242a1ef5ae3ad32e98e26076d2ecf91d412882ac953c4dbce427290f6682ed5e78899861460fc9c60faffb7f3fa0c7ed5c43834e382845d5d9b5a0c8010afa37eb5eb2ee4e86c86e66c76c6d12fa9d409e2ff59f5671f1d009c3cb4ac2b3251ab1d551f3e9ed473aa1c0fdc22b58053a930783041f0dfd617134b3c8218b0bb745eff2df0ad79148446a070bb6277483b78bec1cf6441ab603e1f36225bcfcd0de8268c53e16eb609d985e9cfdfe319892cf05e3704878be6ff163edbdde248868733adc239f9794089da6a8c2e845aed5685ebc256175693c03cd2f0895d515334cbcde75259eb14f2dc7789877c0250259687046cbd0a05a021ac93aa4d908a9e1c24e0380699acb21e0ada29cb207b53b38e4443fbaa51c48a05ecdf4d7c11dc59004372951f39c658a430264493236e72f7b7e7b88e8168a3d1bfdd163764a9b3f3ff7cb7c72d30a5005209c8d49a7666f2549343fd2ead57bfecc157dbc3839ccb4df6b6fbac41f9a43605b3d69c3a9f5331e0b024669b36535c3641d298b405089f8937a3afdb2299d5099bc1ea6cff7c09f582973ccf43b495400ab6862f06913847bf901d4a86fd889faa50f4e25009962e918141bd03beb0e9924a2dcd9d69627ff6ad0ef93d6f9ec1e1bae0330dabacf03fce2276ee69118eb42c7b7360af12a1852ed3737d644d2fc5389c30cfa7f92725139752e22624bff442e6a2db95efd73aea715afae70719f0e0364b3d67eb3ecb5c00eec54a0665f367cc152a16ab5d89143fe9358bec56c5ebff3bf9696e2602dfee1b204cd417598289c87d0cd490e399b1846d4b0315967339dc2e0e754c2b30b26501ec08604beb173c55b1e601c62d7b44a4c4debc632bfe5bbe661f02c2753e2ee2f00c54eb9b6f35c0b3c42e7d211f56433a4d68b517a6c0f8e88b13d6954ef9e7a2aa84ad0a87d59bd454768c78f3a38624d44f1404a97578fbf84764c03c49ff2318cae1557e5a018e987a924b9d41893664414d3b7aa5fdef5a42560db04a35cf784f7d6609df50fe491614b414c2f799db98d6ef953a352003544cf56ce2b99fc01cecd320c2bd138967ed2eed1d4cb20607d98d7fd701129a776311d99789c6c4f952776779f8ffa1e4b80be5db5951689ac0e0be4200ec6cb2b42cd46cbc360539b81910baf9e0cbb81117c2ca92b9c45019b9a8104f8169819af939d320f0e550b6111156010e468be5c7e2c07fdc15c390c73edaba99f5e1ac27e2054a91942c288508475bf1d8b4120c4b96c3131650f81f09d22d78ab7cbd0e89c3280307639029c15ac4f86542daf3c5f40a39bc63593770eed7e0679873ab165b6362f63c2ae7984640c6f2af33111225fe2528dc917d801dbd336f589ef8d6d3a4d56cb613d5ff8fae8d6881f5f5e8e2e40ac9041167d3094b6af3cbbd418358778ce9d65f5d1e9bcb7d77c2f45a3fe3e0322f6a6de1b570cc53322ae92edbf0dc0d9b9841f74b1d3063828114620b16f71888a6b432aa651595ffd1b2da82d4446ad01cc73c541ee1139df1e187a041d0f955da725449d052f317e0dba86ab4e0b779c892f05c83a63f58947c1c4434ca381", 0x1000}, {&(0x7f00000013c0)="c6c4ecdfc4d01e7e6b6b80a8642092", 0xf}, {&(0x7f0000001400)="8e155f78ef5ec01278136f85a0827b101a0ca27eb8400176bd3a72a7fd381d776ef02198f167e82e70e3b289de6da05ef694a3480739d68c7e002a9f84e7063c6a0bde23dc5eeefcb10421f5958193346ac6fd9b524713ff515fa8a046800a340c17161ec89be4f2a0de23e21cdcaa6f86839a13f2744ffc0958e9f761ea94d6eddafe17044a0f5098d5bdc0ddaf8d29797c3c4ec8330943f07090d00bfdc4bb70f64cdd46686706527404ee8d3ccad38fc9ab5e89ed4bc30d67f68060cbe020b635ebc149", 0xc5}, {&(0x7f0000001500)="a7e1003b70c5c76994ef477dae75e7a59e1910642ad931706f3ec5af51fc8c5b776f6cf434612d75d9630a6cbb655a3ddfb8f316d5d9866554e6fd0f51dcdc20009631102e9e99eed454e18ababca58bd5d9670a06328e2baf26c82490356caba2597f734298b9226f84893b4885051b3e7f38bdebef82006fdbfc62a58665dd893f5c63abf8d4b2e50969f9e55a7f43a6ca46e47de60609f488513ebc1600803083c5b722371d2d0c97cfe2eeb0371773d0545de4b9f256be0cd8c8c32ed38fa0a41f1f8bd8f98155f3548551b6afc587c7387f6e5634", 0xd7}], 0x9) sendmmsg(r0, &(0x7f0000003e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[{0x10, 0x110, 0xd}], 0x10}}], 0x2, 0x0) 03:20:51 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x2, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:20:51 executing program 1: r0 = socket(0x1e, 0x80000, 0x2) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x3) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) r3 = accept(r2, &(0x7f0000000180)=@isdn, &(0x7f0000000200)=0x80) recvfrom$rxrpc(r3, &(0x7f0000000240)=""/178, 0xb2, 0xc0010100, &(0x7f0000000300)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x7, @mcast2}}, 0x24) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x0, 0xfaa}, 0x10) r4 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000100), &(0x7f0000000140)=0x8) recvfrom$netrom(r1, &(0x7f0000000000)=""/211, 0x7b, 0x60, 0x0, 0x0) close(r0) 03:20:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0xc00}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) 03:20:51 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'wg2\x00'}) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="edbfd8cf033a27f789017e0c688d705d6361f6218487a6ca8568672d3ff766fb12a7a2ebad1011d82345326757e395f055186827caa4f040f2f0107ebf2a912cf87c790e6cc6f2cb60bf9a03cb53bdfe4341018069430705366bd410711bd3886ba1e7353aad485b8947f54dbc0520218517d7751e4ce566434c2a968f139dddffc3c018cf9ca6d57a8cda646b9d9edda54437f32302e0caae5b7079d1abf9a87a"], 0xa) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r3 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001440)) r4 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r4, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r4, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000280)) sendto$isdn(0xffffffffffffffff, &(0x7f0000000300)={0x800, 0x2068, "923cd9b4eac221fc5e39821772fa39f334fcece6cb93a57739b5a8c1ec1344c6086023e247aaa4642cc1c1d0f0be16a3062d494fdd69b530898523b5297e19bec937f3e8c473eeeecaeb6beef50a3fb873381c3114dc9ea27c0ce25494aaa26054da6c1a5ed2f183f325efbbfc53613d7f71fc45"}, 0x7c, 0x1, &(0x7f0000000380)={0x22, 0xc1, 0x80, 0x3f, 0x2}, 0x6) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000080)=0x4) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f00000001c0), &(0x7f0000000240)=0x4) 03:20:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0xe00}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) 03:20:52 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x3, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:20:52 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x14, 0x7, 0x6, 0x101}, 0x14}}, 0x24000001) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) readv(r2, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/179, 0xb3}], 0x1) sendfile(r2, r1, 0x0, 0x100000001) 03:20:52 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) r1 = socket(0x10, 0x80002, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x4, r3, {}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffe0}]}}]}, 0x38}, 0x1, 0x1400}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x2b, 0xfffffffffffffe7f, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001fffffff00004000632f77fbac141412e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x0, 0xfffffffffffffe09}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r4, 0xc0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=0x5, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x3, 0x2}, 0x0, 0x0, &(0x7f0000000480)={0x5, 0xd, 0x7ed, 0x6}, &(0x7f00000004c0)=0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=0xfff}}, 0x10) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x1e8, 0x12, 0x20, 0x70bd28, 0x25dfdbfc, {0x11, 0x0, 0x2, 0x6, {0x4e24, 0x4e20, [0x8, 0x7fffffff, 0x7a8], [0x1000, 0x80000000, 0x81, 0x101], r3, [0x8001, 0x13a9]}, 0x3, 0x80}, [@INET_DIAG_REQ_BYTECODE={0x5f, 0x1, "8f9fb298805e6eb7f3d33ace92fcccfd5a3fc18bf25bea5e617a468385aa55ac0725062dd0d2dedd82a2f58960a7d66b52a4998e03c67cbe2443d25eb5e6fdda609dd4376b58fd3c8a90266c76f78ca07a97ca21418a284b966266"}, @INET_DIAG_REQ_BYTECODE={0x45, 0x1, "1ffc567b29192186fbc04e6d1bc07c0be0fc7a8649d02125a1c481f37f910c8cacf3101e5b359e2f5d62049a7a5611371ef5246283c8ffe0f2a39aefccd6dc3224"}, @INET_DIAG_REQ_BYTECODE={0xf2, 0x1, "a504c71440924e65e040bb4b184ac2bf76c29811082f0208fd3896f767612d3e4936f03ac6d09feb392cebe17d32f8cdd06a1b267ff3407d8921f4334eab3ff07642a4c1ffd3dd52da92a470c6bd0fc4e61188c90891a2cd6196725a6125933948da603e92fe6e9d8e60262f7c5dd58d216c1cb43ead73a49c60ae08c1cba5123e59fd64b0563c9051f421c3a5c1fd3527e253d86bbf0bb0f11d0546d87bafcd1e782cfccda8c3948cf6a5350bbbd79e9aedc373699306587a20f2ca76cf3cf009d0a3692b6c29181ce2a5b0fad8d3c4fc834cef3ff9000b259754702b9e49ddacedee5673582c4bf48289a401a7"}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r5 = socket$netlink(0x10, 0x3, 0x15) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@ldst={0x5, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 03:20:52 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x7a05, 0x1700) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_delrule={0x28, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc, 0x14, {0x0, r5}}]}, 0x28}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=@delpolicy={0x98, 0x14, 0x800, 0x70bd28, 0x25dfdbfd, {{@in6=@empty, @in=@broadcast, 0x4e20, 0x7f, 0x4e21, 0x35, 0xa, 0x180, 0x80, 0x3c, 0x0, r5}, 0x0, 0x2}, [@tfcpad={0x8, 0x16, 0x6}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7f}, @address_filter={0x28, 0x1a, {@in=@rand_addr=0x26, @in=@remote, 0x2, 0x7f, 0x5}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x10001}, @extra_flags={0x8, 0x18, 0x2}]}, 0x98}, 0x1, 0x0, 0x0, 0x4800}, 0x24040000) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="006d656d6f727903"], 0xda00) pwritev(r1, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000240)="da", 0x1}, {&(0x7f00000001c0)="a0", 0x1}], 0x3, 0x0) [ 958.414296][ T8994] netlink: 'syz-executor.1': attribute type 27 has an invalid length. 03:20:52 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x4, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:20:52 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000080)={0x6, 0x8, 0x4, 0x10000, 0x3ff, 0x200}) sendfile(r1, r2, 0x0, 0xf03b0000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000240)={0x0, 0x29, "ffc8ac0be0a374878c7e47d5bc9ce665c17350f2571c345190bc22ed7a01831a342a4f528268e2c2e6"}, &(0x7f0000000280)=0x31) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000500)=ANY=[@ANYRES32=r4, @ANYBLOB="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"], &(0x7f00000003c0)=0xd8) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8000003}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r5, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8e}]}, 0x2c}, 0x1, 0x0, 0x0, 0x14044045}, 0x4001) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f00000004c0)=0xff, 0x2) 03:20:52 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"/753, @ANYRES32=r5, @ANYBLOB="00000000000000000400f1ff0a000100626173696300000004000200"], 0x34}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 03:20:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0xf00}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) 03:20:52 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x14, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:20:52 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x7a05, 0x1700) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_delrule={0x28, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc, 0x14, {0x0, r5}}]}, 0x28}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=@delpolicy={0x98, 0x14, 0x800, 0x70bd28, 0x25dfdbfd, {{@in6=@empty, @in=@broadcast, 0x4e20, 0x7f, 0x4e21, 0x35, 0xa, 0x180, 0x80, 0x3c, 0x0, r5}, 0x0, 0x2}, [@tfcpad={0x8, 0x16, 0x6}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7f}, @address_filter={0x28, 0x1a, {@in=@rand_addr=0x26, @in=@remote, 0x2, 0x7f, 0x5}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x10001}, @extra_flags={0x8, 0x18, 0x2}]}, 0x98}, 0x1, 0x0, 0x0, 0x4800}, 0x24040000) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="006d656d6f727903"], 0xda00) pwritev(r1, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000240)="da", 0x1}, {&(0x7f00000001c0)="a0", 0x1}], 0x3, 0x0) [ 958.743700][ T9017] EXT4-fs warning (device sda1): verify_group_input:131: Cannot add at group 6 (only 16 groups) 03:20:52 executing program 1: r0 = socket(0x25, 0x801, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000040), 0x4) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000080)=0x28) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) sendmsg$sock(r1, &(0x7f0000000380)={&(0x7f00000000c0)=@llc={0x1a, 0x200, 0x3, 0xef, 0x3f, 0x8, @random="10085cbc3863"}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000140)="e7180e88117a48fff71b5032211601c1028b18039feaaa0f2c00f12b3069300416f05a326a525dfe91a1ef08d4199a3d6949f96ef74df8758b2bf9347ca15d6cbd22675a6a795cfad2e2fb43031cd5d0e7404ce93cecabd44e34982125c5cd0e93308ac9a67ab1a26c86e5f457a86ceca95cb64a912ee5ba3291e0cd57e204", 0x7f}, {&(0x7f00000001c0)="b3ae8ea17a17956825424f866b772ed5884394efc42f71fb9c7e169bd624e76039ec595dd7ced2dc35f3c65d0cda328b21a70103d8da52f207ef54df61edc1bb1d52a1cc8efa8f97c6d2db646b1a614fce48a134e313ab234bb237741845784b775276777f03563252e000a7663e491722e5254689f7b5593b87e64b9115742e99a8db2089aacdd3ad4a45409bb549f1bdaabff0cb1c4eb07ea3ab8cce1cc56f2e546c746889d33cf37c03ea68933dddab7e278390d93c6683b0abb1c40ad3a4efce07e2d86ed1ceb157348bddaf2dd63496f8bf6beddea02368bb29df3b5a4737ff5b96525d2cc5", 0xe8}], 0x2, &(0x7f0000000300)=[@txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}], 0x60}, 0x20000004) [ 958.816939][ T9017] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 958.878196][ T9017] EXT4-fs warning (device sda1): verify_group_input:131: Cannot add at group 6 (only 16 groups) [ 958.898071][ T9033] __nla_validate_parse: 3 callbacks suppressed [ 958.898081][ T9033] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 958.931456][ T9019] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 958.968998][ T9019] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 03:20:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x1100}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) 03:20:52 executing program 2: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) recvfrom$unix(r0, &(0x7f0000001200)=""/236, 0xec, 0x0, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e23}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x24}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 03:20:52 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x58, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) [ 959.049002][ T9033] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 03:20:52 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x6, 0x3, 0x0, "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006926ed0c00"}, 0xd8) write(0xffffffffffffffff, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e21, @dev}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e1e, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @sack_perm, @mss, @mss, @timestamp, @sack_perm], 0xeb) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000007ffe, 0x7fffffff}, 0x14) shutdown(r0, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) 03:20:52 executing program 4: r0 = socket$inet(0x2, 0x4, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)="d083b8778d9e055daedb2fb289f629afab3edb0b25311ef1e77295a000a43e2610b846a5a59c06a800d3d76df145cad9aaddefb439dffeeefe70124989633510139d58215535682c572c0200f0ffff2d7c837bb19dbcaee855e962", 0x5b}, {&(0x7f00000016c0)="7507747dd9bcc24bc91de456a59990f36599f89b848cf73dba62e0ee4d214b4ea417ba047283d923aa85916b00b01784", 0x30}, {&(0x7f0000001b40)="a45d4e26c6fadcbd663ccd6c0aca006b802c18d131b5427b3d4515dee8f10570a5923f3f543435278f94c3f8f0d4c35488ecfb1bd630b2e1e0e4247bb449", 0x3e}], 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000a35000/0x400000)=nil, 0x400000, 0x1, 0x2013, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB], 0x1}, 0x1, 0x0, 0x0, 0x4010}, 0x410) write$binfmt_script(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="99"], 0xfffffd78) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x300000a, 0x2011, r1, 0x0) mmap(&(0x7f0000a35000/0x400000)=nil, 0x400000, 0x1, 0x2013, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x11, r2, 0x0) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) write$binfmt_elf64(r0, &(0x7f0000001cc0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000340)={0x0, 0x7f, 0x10, 0x3, 0x7ff}, &(0x7f0000000380)=0x18) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000003c0)={r3, 0xfffffff9}, &(0x7f00000004c0)=0x8) sendmmsg(0xffffffffffffffff, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 03:20:52 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="700100002400ffffff070000ddff000000009300", @ANYRES32=r1, @ANYBLOB="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"], 0x170}}, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r2, &(0x7f0000000080)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x7fff, @ipv4={[], [], @rand_addr=0x6}, 0x2}}, 0xfffffed6) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x8, 0x22, 0x9, 0x8}, {0x4, 0x9, 0xff, 0x27b1fb28}, {0xf1e6, 0x5, 0x40, 0x6}]}, 0x10) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000680)={'TPROXY\x00'}, &(0x7f00000006c0)=0x1e) r4 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r4, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r4, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r4, 0x8983, &(0x7f0000000100)={0x1, 'team_slave_1\x00', {}, 0x200}) r5 = socket(0x10, 0x80802, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000000000000001000000020000004f20f1b9b87e489225336a3398b19c701f337f855a73", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00003e8525979e2d0a89551b7fa3d0385e090000"], 0x30}, 0x0) bind$rxrpc(0xffffffffffffffff, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000700), &(0x7f0000000740)=0x8) sendmmsg$alg(r5, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492507, 0x0) [ 959.203701][ T9049] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 959.272249][ T9049] netlink: 'syz-executor.2': attribute type 27 has an invalid length. 03:20:53 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000a00)=ANY=[@ANYRES32], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4044881) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x16, &(0x7f0000000140), &(0x7f0000000280)=0x4) r3 = socket$netlink(0x10, 0x3, 0xb) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a03, 0x1700) [ 959.347598][ T9063] netlink: 'syz-executor.1': attribute type 27 has an invalid length. 03:20:53 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0xf0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:20:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x1200}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) [ 959.403739][ T9068] netlink: 'syz-executor.1': attribute type 27 has an invalid length. 03:20:53 executing program 1: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) openat$cgroup_ro(r1, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x0, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000000)='cpuacct.stat\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8000003}) [ 959.569983][ T26] audit: type=1804 audit(1586748053.229:697): pid=9073 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922123606/syzkaller.TgTSaq/698/memory.events" dev="sda1" ino=16289 res=1 03:20:53 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x300, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:20:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x1300}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) [ 959.704717][ T26] audit: type=1800 audit(1586748053.229:698): pid=9073 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=16289 res=0 03:20:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x10) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d000300ea1100000005000000", 0x29}], 0x1) [ 959.817943][ T26] audit: type=1804 audit(1586748053.239:699): pid=9073 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir922123606/syzkaller.TgTSaq/698/memory.events" dev="sda1" ino=16289 res=1 03:20:53 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x94b, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) [ 959.966771][ T26] audit: type=1804 audit(1586748053.329:700): pid=9075 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922123606/syzkaller.TgTSaq/698/memory.events" dev="sda1" ino=16289 res=1 03:20:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x1400}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) [ 960.072200][ T26] audit: type=1800 audit(1586748053.329:701): pid=9075 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=16289 res=0 [ 960.166242][ T26] audit: type=1800 audit(1586748053.339:702): pid=9075 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=16289 res=0 03:20:53 executing program 2: r0 = epoll_create(0x9) r1 = syz_init_net_socket$nfc_raw(0x27, 0x6, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0xa, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x8}}]}]}, 0x24}}, 0x801) r3 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f00000004c0)={0x10000013}) setsockopt$inet6_buf(r2, 0x29, 0x0, &(0x7f0000000500)="56164eeee38d4112c62c433b8279ddbdb8ba7fc518cd770d8c979176aebc3e1fdbb6236eabe9", 0x26) r4 = accept(r1, &(0x7f0000000540)=@generic, &(0x7f00000005c0)=0x80) setsockopt$netrom_NETROM_T2(r4, 0x103, 0x2, &(0x7f0000000600)=0xfffffffd, 0x4) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, 0x3e9, 0x20, 0x70bd2b, 0x25dfdbfc, {0x77, 0x0, 0x2, 0x0, 0x6, 0x7, 0x4, 0x0, 0x2}}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x3f, &(0x7f0000000740)=0x9b, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000780)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)=@bridge_dellink={0x90, 0x11, 0x400, 0x70bd2c, 0x25dfdbfc, {0x7, 0x0, 0x0, r6, 0x48118, 0x20}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xde4b}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg2\x00'}, @IFLA_CARRIER={0x5, 0x21, 0x1}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x19c8}, @IFLA_PROTO_DOWN={0x5}, @IFLA_MAP={0x24, 0xe, {0x81, 0x101, 0x10000, 0xaf, 0x3, 0x7f}}, @IFLA_LINKMODE={0x5, 0x11, 0x21}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x8}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0xe8a}]}, 0x90}, 0x1, 0x0, 0x0, 0x8041}, 0x80) syz_genetlink_get_family_id$wireguard(&(0x7f0000000980)='wireguard\x00') ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000009c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xffff, @default, @netrom={'nr', 0x0}, 0x0, [@null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default]}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8982, &(0x7f0000000a40)={0x6, 'team_slave_1\x00', {0x7}, 0x8000}) sendto$x25(0xffffffffffffffff, &(0x7f0000000a80)="1880de96e1ee369a84a4b8299dae641d8109a00ca325a58d7adaef9ddb549840ee6ec387a831d808edcb962caba229a36e1d356eddcf9a9718d85df8cecbf4c3f3b2c423904f0a1d1f5e7a78c4d11b6fbad0dfaa8c9961d51ec799837a201ef8642449e27b64f20360edba98e3040cc160cd8116c00f64f6a5ffde1f26775cac8acbe6d4271de384ac23e22f633d9ab582e4a2", 0x93, 0x6000880, &(0x7f0000000b40)={0x9, @remote={[], 0x0}}, 0x12) [ 960.305479][ T26] audit: type=1804 audit(1586748053.349:703): pid=9073 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir922123606/syzkaller.TgTSaq/698/memory.events" dev="sda1" ino=16289 res=1 [ 960.382535][ T26] audit: type=1804 audit(1586748053.349:704): pid=9075 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922123606/syzkaller.TgTSaq/698/memory.events" dev="sda1" ino=16289 res=1 [ 960.437545][ T26] audit: type=1800 audit(1586748053.349:705): pid=9075 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=16289 res=0 03:20:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket(0xa, 0x2, 0x0) r3 = socket(0xa, 0x1, 0x0) close(r3) r4 = socket$inet(0x2, 0x80001, 0x84) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r5, &(0x7f0000000040)={0x1a, 0x304}, 0x10) sendmmsg(r5, &(0x7f0000002580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvmmsg(r5, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2123, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r7, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x18, 0x453, 0x400, 0x70bd27, 0x25dfdbfe, "65c4bc6f51", ["", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4c001}, 0x8884) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000680)={r6}, &(0x7f00000006c0)=0xc) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000080)={r6, 0x81, 0x10, 0x2}, &(0x7f0000000180)=0x18) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010000fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100687372001c00028008000100", @ANYRES32=r1, @ANYBLOB="050006000000000008000200", @ANYRES32=r8, @ANYBLOB="9a537a2c0de98a8644b6d7076de208bf64e2d6db90ee41340e9f66b5333fcac4b3c74d06830509cdd1b76d020b79af6dec659b690b962f5315e6d5a3a4d4a7ddd615abc84ddd6c3910bac4bd618a9d66561c85ccba697e0bbfdcec386075d5766f99602a726fd31750946be476ced39b89ba20a443b06b25f8e85ede31815ded969c81a50e71f9751e0cfa4ff1b46a541e6072213b"], 0x48}}, 0x0) 03:20:54 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x1400, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:20:54 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0819b5055e0bcfe847a071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x9}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x12}]}}]}, 0x3c}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x38, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x5, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000700)={0x190, r7, 0x0, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6a52dd82}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x130, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8efa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff89}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x89f8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb335}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf2c8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd5b7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x17e}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000884) sendmmsg$alg(r4, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=ANY=[@ANYBLOB="000000000000000017010000020000000000000015dc91768c78ba00b50b7a5e4e7907526d7c7c8aee968a562b00cb905e1826a8f9ee0ac480576a7134801fc070041984c5c23fa1f93b59075853f70545ce9c61b15ff65cde5078b4209217f0220f0810f739bd470d405272edb16434a11869d08d8fef065de94710ee553b410c3c02a96c156836af8d11c4af4a77e766f9ed8ec43830fe02bb22babf9b41d4e5027b49ba3f720465bf4ee9b63892030f4fea97d94bc6cd1a7d4d6869cb3185e5da3ca0da000000000000000000000017010000030000000000000000000000000000afca75c38d6500000000001701000004000000000000000000000000000eb6d7f66dc50eb3000004000000000000000000000000000000002017010000030000000000000000000000000000000000000017010000030000000000"]}], 0x4924924924924b3, 0x0) 03:20:54 executing program 1: ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000140)=@get={0x1, 0x0, 0x2}) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000080)="080db5055e0bcfe847a071") r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000240)={0x400}, 0x4) write(r1, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) r3 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r3, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r3, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000100)={r3}) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) accept$packet(r5, &(0x7f0000001840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001880)=0x14) recvfrom$packet(r4, &(0x7f0000000180)=""/141, 0x8d, 0x120, &(0x7f00000018c0)={0x11, 0x1a, r6, 0x1, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004020000000000"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x4, 0x3, &(0x7f0000000040)=@framed={{}, [@exit, @call, @func]}, &(0x7f00000000c0)='GPL\x00', 0x5, 0xb6, &(0x7f0000000400)=""/182, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x0, 0x0, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140), 0x2}, 0x70) 03:20:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x3f00}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) 03:20:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8, 0x6, 0x9}]}, 0x24}}, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) r2 = socket(0x10, 0x80002, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x4, r4, {}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffe0}]}}]}, 0x38}, 0x1, 0x1400}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000000)={@ipv4={[], [], @multicast1}, 0x7, r4}) 03:20:54 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x3f00, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:20:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000040)="080db5055e0bcfe8479071") sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x254, &(0x7f0000000300)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x41d, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xa, 0x10}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x3c}, 0x1, 0xffffffc3}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000240)) r3 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x28) sendmmsg(r3, &(0x7f00000092c0), 0x400000000000064, 0x0) accept4$inet6(r1, &(0x7f00000006c0)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, &(0x7f0000000700)=0x1c, 0x80000) r4 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000740), 0x800) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000800)={{{@in=@broadcast, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f0000000900)=0xe8) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002400290800000000000000000400000008000c00", @ANYRES32=r5, @ANYBLOB="08008200", @ANYRES32=0x0, @ANYBLOB="713da829208be6cce9feb3e1cc4f9880a57a68313f36b633ddd70702077eaa6abf8764a1b2f73291091ca3ccb7638b8cf22d97e7dc2b84a405698ba23ac80de4a29e0ac16c7d84c610a2409fe97a7437461bb4f3e3686c03ef23cada75fcc2ece21559db303215832d557f8915058d4e4be354a7c70a83fb211ad0150f2aaaf84533e1047153588378c25d92a3093e087c1a666fe7ba07a5f4e52169803f72bd60ca03ccad80ffa34a59b5ba3cf88048dd807822dc1f457bcf96ed9c77"], 0x24}, 0x1, 0xffffff7f0e000000}, 0x0) getgid() r7 = socket(0x200000000000011, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r7, &(0x7f0000000240)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @random="af9a974cb7e1"}, 0x14) getsockname$packet(r7, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) accept$inet(r7, &(0x7f0000000280)={0x2, 0x0, @loopback}, &(0x7f0000000340)=0x10) [ 960.670716][ T26] audit: type=1107 audit(1586748054.329:706): pid=9132 uid=0 auid=0 ses=4 subj==unconfined msg='eļoQ' 03:20:54 executing program 1: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r0, 0x89e0, &(0x7f0000000000)={'ip6gre0\x00', 0x1, 0x3f}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r2, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, [], 0x3c}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r3 = socket(0x6, 0x2, 0x1) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1020100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xa8, r4, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e22, @broadcast}}}}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x56}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x53}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4008044}, 0x10) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000440)={0x8, 'ip6gre0\x00', {'ipvlan1\x00'}, 0x3}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_MCAST_LEAVE_GROUP(r5, 0x29, 0x2d, &(0x7f0000000480)={0x3, {{0xa, 0x4e22, 0x8, @empty, 0x4}}}, 0x88) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r6, 0x8983, &(0x7f0000000540)={0x8, 'veth0_vlan\x00', {'batadv0\x00'}, 0x3}) r7 = socket$netlink(0x10, 0x3, 0x1) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, 0x3, 0x6, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40004005) socketpair(0xa, 0x800, 0x8, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000006c0)={@multicast1, @broadcast, 0x0}, &(0x7f0000000700)=0xc) sendmsg$xdp(r8, &(0x7f0000000980)={&(0x7f0000000740)={0x2c, 0x0, r10, 0x38}, 0x10, &(0x7f0000000940)=[{&(0x7f0000000780)="d654c2f462454c15b0fc4055396e60f1d05965fa460ed0e31837ee76798e9d483fb89e7459997c92c538db0e95e3be611dcc058d3c638bccb47c63d632ae", 0x3e}, {&(0x7f00000007c0)="76eae470e30921f8640ea5786067fcb709a4e1258bcb06b5552d9b9dc64ada2e617befab9b38b8b7bb7169f413f64760521862f74b62f532e4656f3003765b47ec3bbc58cbb0cfb86bd5eabd557c6e5b40812b412c084f7f75d560df7cdff85594f5c941e9", 0x65}, {&(0x7f0000000840)="3406764f847cc9cc48a7fe690dd4711ae2e9420a75579730c734a441780c9a245bc787276b87056978dcb3a6a4e03687817caf11d569f017e96e5c5d6e98ccf5056e7d1cd9398ee38690b8a26b4d629b01ac8392e8d0f4c5105e67bd1d62af15288c22ab76fb450cdfa424eb769a1c75a41070c719de0e44ec1d8f60b76527ed029fd4e9d603f3eac7f3dabf501ab6a92e7a5d3300c0c7555b623d48b9107ff0a54047e49dd4c89f9aab8c7ebb503b388daaffa675cc5f547a4b628029b65136e2bafb0ac4234234b86aff0242f1e1941fc6e81c838f842c1ad2c9654a4891d0b9fe8bfb01f4df278627d2070b637a6aaedaa1ebb888", 0xf6}], 0x3, 0x0, 0x0, 0x1}, 0x804) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000009c0)="4a7919e9df543d5cd6848cfe1a11d27f", 0x10) sendmsg$NFT_MSG_GETFLOWTABLE(r9, &(0x7f0000000c00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x168, 0x17, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_FLOWTABLE_HOOK={0x124, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'vcan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x168}, 0x1, 0x0, 0x0, 0x800}, 0x80) [ 960.801066][ T9138] device batadv0 entered promiscuous mode [ 960.868234][ T9138] device batadv0 left promiscuous mode [ 960.968122][ T9151] team0: Device ipvlan1 failed to register rx_handler 03:20:54 executing program 5: r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c) r1 = socket(0xa, 0x2, 0x0) r2 = socket(0xa, 0x1, 0x0) close(r2) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000680)={r4}, &(0x7f00000006c0)=0xc) r5 = socket(0xa, 0x1, 0x0) close(r5) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000680)={r6}, &(0x7f00000006c0)=0xc) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={r6, 0x81, 0x10, 0x2}, &(0x7f0000000180)=0x18) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000140)={r6, 0x7}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000200)={r7, 0x1f, 0xfffffffc, 0x3}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000080)={r4, 0xa1, 0x30, 0x3}, &(0x7f0000000180)=0x18) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r4, 0xfffffffa, 0x800, 0x7}, 0x10) r8 = socket$unix(0x1, 0x5, 0x0) getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) bind$unix(r8, &(0x7f0000000680)=@abs={0x1}, 0x6e) 03:20:54 executing program 5: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) listen(r0, 0x0) unshare(0x40000000) r1 = accept(r0, 0x0, 0x0) r2 = socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000080)=0x8, 0x1) write$binfmt_elf64(r1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000240)={0x30, r4, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x17, {0x0, 0x0, @l2={'ib', 0x3a, 'lo\x00'}}}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000890}, 0x800) [ 961.369482][ T26] audit: type=1107 audit(1586748055.029:707): pid=9132 uid=0 auid=0 ses=4 subj==unconfined msg='eļoQ' [ 961.371002][ T9179] IPVS: ftp: loaded support on port[0] = 21 03:20:55 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x4b09, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) [ 961.458859][ T9138] device batadv0 entered promiscuous mode [ 961.834930][ T9138] device batadv0 left promiscuous mode [ 961.915961][ T9178] tipc: Enabling not permitted [ 961.921651][ T9178] tipc: Enabling of bearer rejected, failed to enable media [ 961.935222][ T9151] team0: Device ipvlan1 failed to register rx_handler [ 962.086336][ T9185] IPVS: ftp: loaded support on port[0] = 21 [ 962.121289][ T9207] tipc: Enabling not permitted 03:20:55 executing program 4: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x80, 0x3, 0x4, 0x24, 0x6, 0x3, 0x0, 0x3f, 0x2, 0xd0, 0x0, 0x7, 0x9, 0x8}, 0xe) r1 = socket$inet6(0xa, 0x2, 0x6) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) r3 = socket(0x10, 0x80002, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x4, r5, {}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffe0}]}}]}, 0x38}, 0x1, 0x1400}, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f00000000c0)={@mcast2, r5}, 0x14) accept(r1, 0x0, &(0x7f00000003c0)=0xfffffffffffffee6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) recvmmsg(r6, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) r7 = openat$cgroup_ro(r6, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r7, 0x84, 0x7, &(0x7f0000000240), &(0x7f0000000300)=0x4) 03:20:55 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") syz_open_procfs$namespace(0x0, &(0x7f0000000580)='ns/pid\x00') r2 = socket(0x8, 0x3, 0x8) recvfrom$rose(r2, &(0x7f00000000c0)=""/229, 0xe5, 0x20, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0xfffffffffffffe7f, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001fffffff00004000632977fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x0, 0x716545205af2c1da}, 0x28) 03:20:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x4000}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) 03:20:55 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x5800, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:20:55 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667300080002000000000000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB='\\\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000020000000b000100666c6f77657200002c00020014001f00fe8800000000000000000000000000011400200000000000000000000000000000000000df4f792a31c9ad2bbcb24045fcdbfe894a4a2a6ba4c221198becaa003c1953dff33568914d7f1395c95866909dc0e10c3ef5d73bc41ffa3198c1d6c6e9ca7d3998be97ef8b0a13065a056a1b58d65ca6d7230615f1"], 0x3}, 0x1, 0x0, 0x0, 0x14}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 962.165181][ T9207] tipc: Enabling of bearer rejected, failed to enable media [ 962.331557][ T9232] validate_nla: 6 callbacks suppressed [ 962.331567][ T9232] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 962.378046][ T9231] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 03:20:56 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0xf000, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) [ 962.448772][ T9241] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 03:20:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x4001}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) [ 962.602751][ T9232] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 962.636282][ T9255] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 03:20:56 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340)='nl80211\x00') r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) r2 = socket(0x10, 0x80002, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x4, r4, {}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffe0}]}}]}, 0x38}, 0x1, 0x1400}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="9bffffff", @ANYRES16=r0, @ANYBLOB="0000000000000000000008000000000099002000000001000000000004000000000000050005000000000001800200000000000300", @ANYRES32=r4, @ANYBLOB="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"], 0x14}}, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x20000001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x400}}]}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MTU={0x8}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 03:20:56 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x34000, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) [ 962.792586][T31896] tipc: TX() has been purged, node left! 03:20:56 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000001300)="b0941fefa828af997b330b1930eadcdb8af314aa700a126baa5eb7883b1ce18bb71386266a4336dbc677443d1c31dfda1c6659a00e98d76749ad2b899ddef691f6c51718c5b71891d91f99f15075e022b0b397680eb780fde1b6c563aeddd1714bf1859db781c0283368d61fa4ec548b96f885e4d03960ef7a518d41ac6685ee64632f5b", 0x84}], 0x1, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) getsockopt$bt_hci(r0, 0x84, 0x22, &(0x7f0000000080)=""/4100, &(0x7f00000010c0)=0x1004) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001100)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000001200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000011c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00012bbd7000fbdbdf2505000000300007800c00040006000000000000000c00030008000000000000000c000400060000000000000008000200060000003400098008000200000100000800020003000000080001000900000008000200ff0f000008000200010000800800010005000000cd0c2e04af08c9e88ac1867a856ce746a449eaaafd4c16ab89d649d549d678f9d128f9420b8d9af72aeeaeec14b3357e625c8ca23a08b36fefc83c7006a14e7a73ce0f8185f3029de953054d64e88978fbc8cdb209ba07c7aa42f7281b0b1c51f7d3e0bf300352"], 0x78}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000) [ 962.915132][ T9269] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 963.142472][ T9279] netlink: 'syz-executor.2': attribute type 27 has an invalid length. 03:20:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x1c) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x556, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="e371a01c7d83e16db1918b5328546fd0db633ad73f48121530e272e1e1c5c2d65138cf6c0000624400000000000000"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100400"/20, @ANYRES32=r5, @ANYBLOB="000000000000000008000a0014000000"], 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x3f00, &(0x7f0000000200)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', r5}) r6 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000140)={@remote, 0x0, 0x0, 0x0, 0x1}, 0x21) getsockopt$inet6_mreq(r6, 0x29, 0x15, &(0x7f0000000a00)={@mcast1}, 0x0) 03:20:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x5865}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) 03:20:59 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000002600)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="eba700000000000000000a00000008000300", @ANYRES32], 0x4}}, 0x0) r5 = socket(0x10, 0x80002, 0x0) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x4, r7, {}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffe0}]}}]}, 0x38}, 0x1, 0x1400}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000006440)={0x0, 0x0, &(0x7f0000006400)={&(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, 0x0, {0x3}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}]}, 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000f8ffffffff0a"], 0x3}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl(r9, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") 03:20:59 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x400300, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:20:59 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000b80)={'veth0\x00', &(0x7f0000000a80)=ANY=[@ANYBLOB="0300000083a2bf9b75bedfc5ee1e2ca860833487e144cc268f40ff4c4112b434f9c04d64343f8a0102c2ff798bcbdf573f502e7fd70b54c8fc26b5258854922e0c4ff1efd1aa554a636b3d099c93d43844d229452761b0f9230d18e8218b9736c67da16d4fb35d3048850211f0b84c962c691bd0136deb2bc2bf13f0eeb395e1f32d097c6754c74a2611ad7926d8faf2288c40e0196254150de8c6200a7396d6b000"/196]}) 03:20:59 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000002060101bc275ba30700000000000000000004000000000014000300686173683a69702c706f72742c69700005000a0000000500010007000000"], 0x4c}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendfile(r2, r3, 0x0, 0x100000003) 03:20:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x6000}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) 03:20:59 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0xf0ffff, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) [ 965.975334][ T9319] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 965.995116][ T26] audit: type=1804 audit(1586748059.659:708): pid=9312 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir055243180/syzkaller.BBU39k/729/cgroup.controllers" dev="sda1" ino=16376 res=1 03:20:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@ldst={0x5, 0x5, 0xe001}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x48) r1 = socket(0x26, 0x800, 0x8) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f0000000080)={r2, 0x800}) [ 966.033562][ T9318] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 966.152550][ T26] audit: type=1804 audit(1586748059.689:709): pid=9318 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922123606/syzkaller.TgTSaq/705/cgroup.controllers" dev="sda1" ino=16377 res=1 03:21:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x28, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket(0xa, 0x2, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) accept$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100677470001c00028008000100", @ANYRES32, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB], 0x50}}, 0x0) 03:21:00 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x1000000, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:21:00 executing program 1: socket$inet6(0xa, 0x800, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket(0x10, 0x80002, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x4, r3, {}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffe0}]}}]}, 0x38}, 0x1, 0x1400}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'macvtap0\x00', r3}) r4 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r4, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r4, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) r5 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r5, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r5, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="5c000000100001040800000200000000e7ffffff", @ANYRES32=0x0, @ANYRES32=r5, @ANYPTR, @ANYRES64=r4, @ANYRESHEX=r2, @ANYBLOB="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"], 0x7}}, 0x84) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) [ 966.571148][ T9355] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 966.612319][ T9319] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 03:21:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) bind$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000000)=""/250, &(0x7f0000000100)=0xfa) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000030003b050000000000000000000000003c000100380001000d000100636f6e6e6d61726b00000000200002801c00010000000000000000000000000000000000000000000000000004000600849dab9479ea3e5624616c69e0ed36ba95ff407abd52e64930e1ae92211008f72ad9089889cf874f8cf640ed01031d72496704cbb300d516f87584a1371e0a37a3e835490f62c1951ece8549acaccc07403d344ad2adcbc1e6307eac98fa70b3926b1646b4de3b17c01bc9a6c7193e260e9c7125ffdff300"], 0x50}}, 0x0) 03:21:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x6558}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) 03:21:00 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x2000000, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:21:00 executing program 2: write(0xffffffffffffffff, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) r1 = socket(0xa, 0x2, 0x0) r2 = socket(0xa, 0x1, 0x0) close(r2) r3 = socket$inet(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000680)={r4}, &(0x7f00000006c0)=0xc) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000080)={r4, 0x81, 0x10, 0x2}, &(0x7f0000000180)=0x18) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r4, 0x101}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0x9, 0x6, 0x8003, 0x8, 0x81, 0x0, 0x32b, 0x6, r5}, 0xfffffdb6) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100736974000c00023f74000100", @ANYRES32=r8, @ANYBLOB="af207f8f772a1aa215ff982175bed258a58e7871944d4fda4f49f97ffcd1f587752058a81ae0baaeee03b794b1ca3c634c1dd2cd185b8bc8c2bd7315629254e7516fcdb4f90377af608769cb71fcb59f87ab5e2b1c84073ac589ee3b9317260860619b"], 0x40}}, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 03:21:00 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x10, 0x80002, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000002c00270d000000000000000000000400", @ANYRES32=r5, @ANYBLOB="00000000000000000f0000000858df7dd0000100753332000c00020008008200e0ffffff"], 0x38}, 0x1, 0x1400}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', r5}) write(r2, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) setsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000000180)=0x12, 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x800}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}}, 0x0) sendfile(r7, r1, 0x0, 0x10000000f) syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r6, 0x1, 0x53, &(0x7f00000000c0)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000140)=0x28) 03:21:00 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, r4, 0x4, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8983, &(0x7f0000000740)={0x7, 'bridge_slave_1\x00', {0x4}, 0x7fff}) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="65350600050000001c0012800c0001006d6163766c616e000c00028008000100080000000a000500040000000000000008000a00f8c62b72a3f4d36d6440cb72b66091a31b19c6e089d1817f42106f", @ANYRES32=r5, @ANYBLOB], 0x50}}, 0x0) sendmsg(r1, &(0x7f0000002380)={&(0x7f0000001ec0)=@ll={0x11, 0xf5, r5, 0x1, 0xf8, 0x6, @local}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000002280)="187a2959d358b9d54c57d4460e6829c085b09503e4ebe399be14af408c69d98967e593dfcd80a34dd68f60750bdeddc79405331451bdac6a36e77e8bc37eef9268f9c141e94d8933b74d84a4ebbeaec7ef7cafef34f97a480a8f06cf30c2115637b9d43d461b2c625cdf1c8b6708233a4c5dde846242c8b05bafc23448bc046dd21a141b46374abcff555845edd5a2e8a1f53c92cab04b8a261ac3561fedcc91ef0817bf12db6b980f2d106a2710473bc9a4256e87dd05363eefc70702ed1e4137b09a020ebf92d49b807a5ac0a8486396da387c2739673d22c519dd", 0xdc}, {&(0x7f0000000180)="ca5a3e53972ec99a6777131107c7dae9e6f54d1e62ab52c5bec5cbdffff9a5cd397e7cf51ab3a7b2305f148a6a9e", 0x2e}], 0x2}, 0x10) r6 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x10000000000020, 0x0, 0x0, 0xfffff03c}, {0x6}]}, 0x10) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000080)={@rand_addr="6440e34f7bc4f85bef12dd0e2df9df0a", r5}, 0x14) [ 967.267325][ T9388] netlink: 'syz-executor.2': attribute type 27 has an invalid length. 03:21:01 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000340)=[@in6={0xa, 0x0, 0x0, @dev, 0x6}]}, &(0x7f0000000180)=0x10) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) r2 = socket(0xa, 0x2, 0x0) r3 = socket(0xa, 0x1, 0x0) close(r3) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000680)={r5}, &(0x7f00000006c0)=0xc) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000080)={r5, 0x81, 0x10, 0x2}, &(0x7f0000000180)=0x18) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000040)={r5, @in6={{0xa, 0x4e22, 0x2, @empty}}, 0x1ff, 0x10000, 0x80000000, 0xfffffeff, 0x813a}, &(0x7f0000000100)=0x98) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={r6, 0x10, &(0x7f0000000340)=[@in={0x2, 0x4e24, @multicast1}]}, &(0x7f0000000180)=0x10) 03:21:01 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x3000000, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) [ 967.365792][ T9388] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 967.553512][ T9399] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 967.564030][ T9411] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 967.597234][ T9399] device gretap0 entered promiscuous mode [ 967.618475][ T9399] device gretap0 left promiscuous mode 03:21:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x8100}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) 03:21:01 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x4000000, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) [ 967.893995][ T9398] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 03:21:01 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, &(0x7f0000000240)={'\x00', 0x1ff, 0x400}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) pwritev(r3, &(0x7f00000015c0)=[{&(0x7f0000000000)='v', 0x1}], 0x1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xfdef) ioctl$FITRIM(r1, 0x40305839, &(0x7f0000000000)={0x0, 0x8001, 0x200}) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) 03:21:01 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0xfe6f) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) getsockopt$inet_tcp_buf(r3, 0x6, 0xb, &(0x7f0000000040)=""/5, &(0x7f0000000080)=0x5) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000001300)={0x0, r0, 0x3}) [ 968.175705][ T9429] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 968.243719][ T9429] device gretap0 entered promiscuous mode 03:21:02 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r0, &(0x7f0000000040), 0x1c) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x9, 0x4) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x8, @empty, 0x10001}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e22, 0x4, @remote, 0xc02b}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e24, 0x1, @ipv4={[], [], @empty}, 0x20}, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e22, 0x93, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8}, @in={0x2, 0x4e24, @multicast1}], 0xc0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0xf48, 0x4) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) recvmmsg(r0, &(0x7f0000005600)=[{{0x0, 0x51, 0x0}}], 0x300, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$IPSET_CMD_GET_BYINDEX(r3, &(0x7f0000000180)={&(0x7f0000000000), 0xc, 0x0}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) [ 968.306920][ T9429] device gretap0 left promiscuous mode [ 968.320680][ T9446] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 968.335084][ T9441] netlink: 'syz-executor.2': attribute type 27 has an invalid length. 03:21:02 executing program 4: syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="48000000100005070000000000f04df7a0e67479", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000160002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000005c498d74a0980c531b25baddc3a35c92c4ced7d110bb1bd380087a72e6e83c782a8727dff5165e7a000000000000001bcc6ca5adc0cf459ccd48419eb9f790490d"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100636273001c0002001800010000000000070000000500000000feff0000000000000000a2e387d63e7217590578003f91160e12e5cab38ea6d14b05d0df915a3f958c4896775630"], 0x48}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f00000005c0)={0x0, 0xfeffffff, &(0x7f0000000580)={&(0x7f0000000500)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) [ 968.450841][ T9452] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 03:21:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0xf000}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) 03:21:02 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x14000000, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) [ 968.759594][ T9455] netlink: 18 bytes leftover after parsing attributes in process `syz-executor.4'. [ 968.821194][ T26] audit: type=1800 audit(1586748062.479:710): pid=9445 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="cgroup.controllers" dev="sda1" ino=16382 res=0 03:21:02 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000f, 0x110, r1, 0xf80a9000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x24, r6, 0x11, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8}]}, 0x24}}, 0x0) sendfile(r3, r2, 0x0, 0x900000005) 03:21:02 executing program 1: socket(0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000200)={0x0, @tipc=@id, @can, @vsock={0x28, 0x0, 0x2711, @my=0x1}}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = socket(0x10, 0x80002, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x4, r3, {}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffe0}]}}]}, 0x38}, 0x1, 0x1400}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000e80)=[{{&(0x7f00000000c0)=@nl=@unspec, 0x80, &(0x7f0000000480)=[{&(0x7f0000000280)="92c205b4de052ed38bdb8947a592a02f47951f0aa5e30ef644b030b8c30a29822c3b8d57d0aafc268eb9ce748d625d2da178669e1085b4ce41e3f3bea863cad194fb382f09246c6b6578b24cb12fbc16d438da8d0d1de9e014247da4884ecc6d95041feb9d361d36a63ce886ee773879985898d5b9ad7beaa342a0a3baff5c5001fa6c37df5631ad533700f132a76f4fe0b7a32ba34fe3fc09d00e5b90cf952ec5769ddc2d12ba199e27af59137dc8f8af20d2d89293ded26f45c83c52b0a2387e822bff0ce6605fd46fe87f371fe65a4490b0428cf52d7fdb311e055d6751c550b1891bf7", 0xe5}, {&(0x7f0000000380)="f0523db48fa2bde969b1986cd2654c469aa74279178b9be40f769e78672220c9c27d03cb9ebe3b4546e05c4cd372720edd48a0d0dc855867249dead1dceee39c76cfe31f0b08e3de9453f3f4b1aab38a722f90e3a533e4be3e3d18aed9a16064ebb6cb174e3560295ec8e6fb116e2f92dc324a26e60445bf6c45934e05d9b1acb0e21da41ed5c2d75e7dc3109c66bcbf51d64cd1c6f044b88a3e8507d52c103edbdcc6fe07fc8b3ce6a0f6d3891c8c73f8664f46483b1033601f052114e966b7364a7194b614594f5e3d", 0xca}, {&(0x7f0000000140)="c95d979aee3c171ce7fe79f38ff0c43991c6a1ad8c2b32dfd038e3f152381c9d6953620c3b3048650a203af7872138f4794c36200fb493e842cb1dd20adbaa45defd5360a3ff0f560c6b58bc726994f35fbda46e87da6eba8a9b6d3071c78cd8f9627d6ad49e80bb6f2d29431a2582015724156e", 0x74}], 0x3}}, {{&(0x7f00000004c0)=@can={0x1d, r3}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000540)="1f4ebeb06c2f30ddd4936f3c9d7e9fddf9affce7b3e05ff898e1d6eedaa0594174b70a0b891ac9c30c47ec625a642f16191a1e8c7f63011d76d48cf63285b11138c8621cda5582a54c", 0x49}, {&(0x7f00000005c0)="4750ce2eb854d5f237f51035225f898afddbd9191682c7ec4e32596b5b792fa46c973f171b06f553454b620120e8d2d319724b4a74c23a1464a480336fbd1eb2e1cde0f4a65ae4ff7cc82ac66d1d5495d4d905c51ffbcbd4b0246ec917a673561e7f52664d02bc97cd632d1a60a8b77fabd17b5f86ba2233f0d9c4fca675aef1a7b5bf6539fa938a828f26d0f259ca1bb31cbc1d15592e122a3390d28f82525257a1b9240a7f6d61c584bdf826e281", 0xaf}], 0x2, &(0x7f00000006c0)=[@txtime={{0x18, 0x1, 0x3d, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0xa08}}, @mark={{0x14, 0x1, 0x24, 0xa0c1}}, @txtime={{0x18, 0x1, 0x3d, 0xa1}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x761}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}], 0xc0}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000780)="ee812ce67b2803860344cc8416f138339c308715ee6f452b47e41ad9d73ecc4a5fb33b14bf044e934b69f6f858609aded2d5f67fee3a815ce559cba65f46980d516c8a3dd405001c0e43bc366674577f3cb9fb53804ef543ed6b1852a0480e48ec2b58f1839bb49900ac04532e6536a960344cea4ee95632e505575506a2e99e1b979aac761db64615d2082ef5b8ade4ccb10fc2d11d90be683dce2f95dcd667e55b72f31c98eda38a7d11059b17311c9ee16ed09072e9fa82837a986220629cc943e17e01163ce66ef7cb039df71b38112a58e2e581e437bb0bfc5b817f7f7ea610a145b5c2c789", 0xe8}, {&(0x7f00000008c0)="09b90ab255660fa0c3f51998640dba916dffa3baeaf80afed0b8df87ce9a6a8a6444747a4a1ab9874c059ca008351c0cb105b6cf64323ccf4c5e0dbe03dcb3144ab6acd23c86fc31daf1b9b34a7bfe4a55f0f04170cdad7650c063f18c676f73946a6c8d856facd1b954ed201ea88ea6be54dd49e4766f3ead65b8175860c7c19af8ed", 0x83}, {&(0x7f0000000980)="337c261f3bf08a8b37a1158950c4c0345e102504646b1e1f3437b1c1621c1842872ed9c49224ac995b1d6a2f15a17fb8e6245a0c45e0cbd3cde24f620599f51ac72852e7c3f3d1a307463bcb093585b172bb7496b06eb5cf32a8e86279c7d6f3e8c233e54f19f87e3b5af81dfd9fd3b8bcfcd3416b3b066aabe5c15828f52e704dc560abefbc5b1377ebaadaab637d70192b5de10b72c67737ee223f8e250c3c50abb7f5c35ef42f60ef485c6a57fb6b4306903b17d41cddb9a373a7bf5a01ea5b503555eb9ead9ae610cd2b6b8260ec5f0717a763f43648d0d32cfa8d0fdbc08b2a7db976146540b5ad86f01f547b069c924ce157742463", 0xf8}], 0x3, &(0x7f0000000ac0)=[@mark={{0x14, 0x1, 0x24, 0x8001}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}], 0x30}}, {{&(0x7f0000000b00)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x2}, [@bcast, @default, @default, @default, @null, @bcast, @null, @default]}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000b80)="86c15177eada97f759706e85ccc402dfc4ae32ef569284df8795dd38b439a5a90189cd36eb208397714e852072b8abee9c5cf37da85a74a002b396b9fd5d095eede253bb2787ae8b4b17e26e8d9438519c952ecb86694fb1cae26c85c77fcdf1", 0x60}], 0x1}}, {{&(0x7f0000000c40)=@ax25={{0x3, @bcast, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @null, @null]}, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000cc0)="eabcd0ca06f44af1d05143a22bef501dceacce32a9ccebfa638c4078a26826c325ec121f4e8f27da1525f3273e00128ba106f81c7493091df0c9d7ddc1e9708d23fd3040c802f1da3dd3d0b47708e6be5be25c4044aed0cb19f1fb6a696f358de998e8825faa406f2618747ff14422e44ae23adbaec01251c55844ab01beaf350e39f5dfb84a3a3dd821ebb694fc440b7a9e62511228c1ea7f440385dee01a568618f000e356c09614e662296c0b4d77619f5dc059ea95f7861870ebc246b99c99d7e7de26e82b1fbde4c564c2e7f4ca23616eca0c0287f2d84811a7635a6a", 0xdf}, {&(0x7f000001a000)="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", 0x1000}], 0x2, &(0x7f0000000e00)=[@timestamping={{0x14, 0x1, 0x25, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x81}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x8}}], 0x78}}], 0x5, 0x400) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendfile(r5, r4, 0x0, 0x100000001) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000880)={&(0x7f0000001000)=""/102400, 0x120933, 0x1000}, 0x20) 03:21:02 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x3f000000, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:21:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0xffff}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) [ 969.242923][ T9456] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 969.333644][ T26] audit: type=1804 audit(1586748062.999:711): pid=9489 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir080444537/syzkaller.UzUSE7/717/cgroup.controllers" dev="sda1" ino=16381 res=1 [ 969.384171][ T9457] netlink: 18 bytes leftover after parsing attributes in process `syz-executor.4'. 03:21:03 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x4b090000, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:21:03 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') r5 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0) ioctl$FITRIM(r5, 0xc0185879, &(0x7f0000000140)={0x3, 0x50000000, 0xffffffff}) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000100)={0x5, [0x7, 0x7ff, 0x7f, 0x4, 0x300]}, 0xe) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x3c, r4, 0x536ae464467e3e0b, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x3c}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) 03:21:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0x3, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) 03:21:03 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x58000000, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) [ 969.805937][ T26] audit: type=1804 audit(1586748063.469:712): pid=9516 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir055243180/syzkaller.BBU39k/734/cgroup.controllers" dev="sda1" ino=16232 res=1 [ 969.831590][ T9526] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 969.901554][ T9526] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 970.007004][ T26] audit: type=1804 audit(1586748063.669:713): pid=9490 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922123606/syzkaller.TgTSaq/708/cgroup.controllers" dev="sda1" ino=16191 res=1 [ 970.132043][ T26] audit: type=1804 audit(1586748063.669:714): pid=9495 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir922123606/syzkaller.TgTSaq/708/cgroup.controllers" dev="sda1" ino=16191 res=1 [ 970.297771][ T26] audit: type=1804 audit(1586748063.959:715): pid=9531 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922123606/syzkaller.TgTSaq/708/cgroup.controllers" dev="sda1" ino=16191 res=1 03:21:04 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x9effffff, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:21:04 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r3, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r3, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f0000000080)="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") getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x4, r4, {}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffe0}]}}]}, 0x38}, 0x1, 0x1400}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'batadv0\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="5090", @ANYRES16=0x0, @ANYBLOB="000425bd7000fcdbdf250500000008000300", @ANYRES32=r4, @ANYBLOB="0c00990000000000010000000c009900090000000100000008000100ffffffff0c009900080000000400000008000300", @ANYRES32=r5, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x881) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000c41a00000141000000140017000000000000000069623a6c6f000700f3a3ee0247690b87c1bf696851c829fb6035a7a532d5bbbcc78976f8b3f798c96fc49f19f8c223fae749692faa0d64b5dd24ad6b5be834fd38ea4d9a15104f4b4378d7c32899bcb1e2c644206bea4cee08def73d3b458266247c3a1dd850c69bef2d16284c954377832bfb49ab9910ce512215a7fed6121d84a05adead054d08353d9362d8d964aef8038a79ee1a"], 0x30}}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r8, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x1ff}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40080) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000040)=0x40000) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000001300)={0x0, r0, 0x1, 0x3, 0x0, 0x4}) 03:21:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0x1c, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) 03:21:04 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468000000001800020014000100000000008ba4eac8f1117a5a10bd2fc05d54aaee0cf7d600ecf169ba7afedf9bd739713ff2ea28283a6bb4d8b4f9954d17808fb826ca7dc439b6", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x5}}, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r3, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r3, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) r4 = accept4(r3, &(0x7f0000004580)=@pppoe, &(0x7f0000004600)=0x80, 0x925c0d534e82aa9) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, &(0x7f0000004700)={&(0x7f0000004640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000046c0)={&(0x7f0000004680)={0x40, 0x140c, 0x0, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x2}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4c085}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x2b, 0xfffffffffffffe7f, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001fffffff00004000632f77fbac141412e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x0, 0xfffffffffffffe09}, 0x28) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r6, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x6}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x20000001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x32, 0xa5, &(0x7f00000000c0)="561f8591e7e73c0023ec0137af4f9f8791dcf54b1bf01cecb39cfa60705bf8bff94b3823b859aa5aa18029fa3e07e8ba5a96", &(0x7f0000000400)=""/165, 0xc000, 0x0, 0x6a, 0x5, &(0x7f0000000340)="28a7bb2c772a36994bb9496e1fc8b99609cc9ae75a138f5525277f727053319ba58f9a6a7617a2745b0ef317c421884e569b290d63966629137029433087a6799378bc8bcc00a0431a60ce9bba9bbd0194a937818f41b89540aec0a499915c877a9b0fc1b6d3ba90a16f", &(0x7f00000004c0)="37a8f39ea7"}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400070500fcff3f07a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtclass={0x5c, 0x28, 0x4, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {0x13, 0x1}, {0x5, 0x3}}, [@TCA_RATE={0x6, 0x5, {0xcf, 0xff}}, @tclass_kind_options=@c_skbprio={0xc, 0x1, 'skbprio\x00'}, @TCA_RATE={0x6, 0x5, {0x20, 0x7}}, @tclass_kind_options=@c_multiq={0xb, 0x1, 'multiq\x00'}, @TCA_RATE={0x6, 0x5, {0x1, 0xff}}, @tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}]}, 0x5c}}, 0x0) 03:21:04 executing program 2: pipe(0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x4000010, r1, 0x0) getpeername$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, &(0x7f0000000140)=0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000300)=0x3, 0x8000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000000)="14c80400546ff69928d88019da678265cb928c68bd83268635b0e595f23bdc92b0d30c081c894742f06f015d761e617a3fe9e66a1d", 0x35, 0x200000e0, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x20, 0x0, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, &(0x7f0000000180)={0x0, 0x3, 0xe650, 0x4}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5800000030003b0527bd7000000000000000000044000100400001000b00010073616d706c6500004900028018000200000000000000000000ffc50005000000000000000800030000002000080005004000000004000600e062bb6b901cb2f2ed4365b465991c132e50d15f121946cacc3c8f80a348da624da90816a01df1d58859b8465d0756d9fbc371f9a5d5ebeaf028b8d5ba23485e83d2e62e85ccd6b5b6082e99104db71b04cbd8c4"], 0x58}}, 0x0) sendfile(r3, r2, 0x0, 0x10000000f) 03:21:04 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = accept4(r0, &(0x7f0000000200)=@xdp, &(0x7f0000000180)=0x80, 0x40000) getsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f00000002c0), &(0x7f0000000340)=0x4) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68) r5 = socket$inet6(0xa, 0x800, 0x67) ioctl(r5, 0x1000008912, &(0x7f0000000280)="080db5055e0bcfe847a071") sendfile(r3, r2, 0x0, 0x100000001) write$ppp(r2, &(0x7f0000000040)="ce57ee779e1a14", 0x7) [ 970.505248][ T9544] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 970.524964][ T9552] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 970.590965][ T9561] netlink: 'syz-executor.1': attribute type 27 has an invalid length. 03:21:04 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0xf0ffffff, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) [ 970.639238][ T26] audit: type=1804 audit(1586748064.299:716): pid=9551 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir832147902/syzkaller.uwTBuJ/910/cgroup.controllers" dev="sda1" ino=16370 res=1 03:21:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x2, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) 03:21:04 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) write$binfmt_script(r0, &(0x7f0000000340)={'#! ', './file0', [{}, {0x20, 'proc+{'}], 0xa, "a807cf58ce56711e46c6b3fad5485a9bb5e034a7a1585a26d6ded64ae7797ec9f51c18ee52632cd3aaacb1c8508f140cbf0c5edf8ac23cdffa0a6cfc3a6b0676bf2e3eae9831a802dc6e03bc057fea486e0fd13b61a00e13d8b31686d46a70ee4bd9f4f175e16cc425e54b9b7787fd24628a713150d9bd7f787e2eece6183f98301092b84f73564b1155d9e4025e800fb1249c7d3c9271f174ddb0e1eb6c0e49275fa8ce9fdafb67de2c4a0a92c2d53dc21f1b79a6cfb88412b5da89e039947e47810d8ad04ca62d3d4a5dfbbb0f8e5286ae73d8ffc253c2116a42bc7f95b740481733e755842e"}, 0xfa) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc0407008b65d8b4ac2ca35c66", 0x10) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) accept(r1, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000000)=0x80) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000240), &(0x7f00000002c0)=0x4) r3 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x0, @broadcast}]}, &(0x7f0000000200)=0x10) sendmmsg$sock(r3, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="018ee9f82e", 0x4}, {&(0x7f0000000140)="5531f5e79d1230ddde98e2f96ff18ba13900c35e67d75c5a6808890239fb4c7dde6a19", 0x23}, {&(0x7f0000000180)="e31520aa566f0e3686390a8b9a5e851d473b7f3f48f1cab37f45b3adf98590fe0fc1bb355a5d7ba1193e0f1b8da27a3185d39bb2f03d2665a8220e0b301f45542d83e05d01a32b5d4d26b012d5763340bebd3fc37f86adfa618871ae0af56300de382edf1aa89e0d", 0x2dd}], 0x3, 0x0, 0x0, 0x1a0}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000480)="92", 0x20000481}], 0x1}}], 0x2, 0x24004880) 03:21:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x200, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0xb) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000080)={r2}) setsockopt$SO_J1939_ERRQUEUE(r6, 0x6b, 0x4, &(0x7f00000000c0), 0x4) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000140)) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000380)) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYRESOCT, @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYPTR, @ANYRES32=r6, @ANYRESHEX=r4, @ANYRES32, @ANYRESHEX=r7, @ANYPTR64], @ANYRESHEX, @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r6], @ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESOCT, @ANYRESHEX, @ANYRES64, @ANYBLOB="46548164c03f0b0d1ee5452c1633350e8c045778b2842fe4fb42123680b0f3a07389b98998b0810342e5866fb79f99c0e5ac804800928ab1e58a2f3d35f07e2b2befe1318edbefe028ab113c8dbf3bd59403d93bd9998ed13370c169bb64a7c6e8f84ede8b5ce1e616e20b2af2aed38ddbad5ee6b195f991f11c7dec346214359d2e614f1b8f4be2459d2e2409c9a49342ed2f7d55e2f158d48cb09a684d574001d9e9fd75113a833b134d2a74e25265026464097180eee14c6edae74b759ad3d3ac5d93db8747ba87544cc32d7d6bfd923f5026eada08ec3e40eadbefeea9e861317f", @ANYRES16], @ANYRES16=0x0, @ANYBLOB="0000b20000000000"], 0x5}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="388dcedd777d0000022400070500000040d85406e2282b3c473ca34bd9804b18172684f85782f859632764b74e0d162d78742997be8a200a75f8ccafbbeb2f9ae77bebf3a0d7369834c311d388b99defce42f0596cd50ac46d8518244a424aa75dc7bb750cd66ae125f343a8aaedef0832df0bee976cef5c0f4a3f7cf6f24405e80e1d98fccce7b3e2e2302b364937ab2a039655ec1ac278327953014184fa0ef74ae97c00"/174, @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xffff}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl(r8, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="2400000011d8588074a7e1bbc3fcff00f0ffffff", @ANYRES32=r7, @ANYBLOB='\x00'/12], 0x24}}, 0x0) [ 970.810019][ T26] audit: type=1804 audit(1586748064.379:717): pid=9549 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922123606/syzkaller.TgTSaq/709/cgroup.controllers" dev="sda1" ino=16372 res=1 03:21:04 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0xfffff000, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:21:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x3, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) 03:21:04 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)='\b') r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r2, 0x10d, 0x5, 0x0, &(0x7f0000000180)) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$netlink(0x10, 0x3, 0x369c26423cc969a2) ioctl(r3, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, r4, 0x209}, 0x14}}, 0x0) socket(0x10, 0x80002, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r7, 0xf915ec8762bad1cd, 0x0, 0x0, {}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="40004676b4e989eb03a8d7cd233e5f1a18d19201fa1908e18b84d3f06d21502785574ff11b8a6d341ab7d239a0ffdda6ecd9ee262bc82c05012b09a13e9b266b70aefcad3f1d460438fd1c7cd8038925daf15aba036c04dc7d461c1a4c8dd1984a", @ANYRES16=r7, @ANYBLOB="000426bd7000fbdbdf2507000000080001000400000008000100030000001400040076657468300000000000000000000000080005000c000000"], 0x40}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) 03:21:04 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0xffffff7f, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:21:04 executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000200)={0x1, {{0xa, 0x4e21, 0x2, @rand_addr="c4371df0029482ae7f9b4a7176d8e7aa", 0x89}}}, 0x88) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000100)) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) r3 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r3, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r3, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000000)=0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f00000002c0)=r4) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0xa, 0x101}, 0x14}}, 0x0) [ 971.277040][ T26] audit: type=1804 audit(1586748064.939:718): pid=9558 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir922123606/syzkaller.TgTSaq/709/cgroup.controllers" dev="sda1" ino=16372 res=1 03:21:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuacct.usage_user\x00', 0x0, 0x0) getsockopt$inet6_tcp_buf(r2, 0x6, 0xd, &(0x7f0000000240)=""/101, &(0x7f0000000140)=0x65) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x1, @local, 'veth0_to_bond\x00'}}, 0x1e) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl(r4, 0x11000008912, &(0x7f0000000040)="0805b5055e0bcfe8474071") sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x70, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x3, 0xc127, 0x60000000]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr="d33ad7353d7d00afcb0920e28640a43b"}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x100, 0x9, 0x2, 0x5]}, @SEG6_ATTR_DST={0x14, 0x1, @remote}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000050}, 0x4080) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) pwritev(r3, &(0x7f0000000500)=[{&(0x7f0000000340)="3dca9c96cdd43e8c90c4d9d5cd8f72", 0xf}, {&(0x7f0000000380)="12986c4c08ed363680815c29f08244fa5dbd6476a7b4dd1e40c6d87bfb22bd9e6dad2813fc9104976290c5a51b2573f516adc80b6133912b7a09aefd40b08c20ab77f0403a73b0195583aa377cd17c5dc682cda7b9b13f67da48acca114724c89836078ecf2567361495eca05382a5e3e48c0ec455f4babac0e7ca0d642a32768deb28d2ec29fa8b6ddd43475d01b4b09d5d2f199b6c43a4851cc8563273a931557e471f8eb7036ab7e3e670b51e6047ce938c4c505f1799fe29fa18f3f2f39be8dd6799ea1ccf68adad7f742d448b74ec692a484fab71aa71f3ae92", 0xdc}, {&(0x7f0000000480)="ad9f8f403077d6f54f4c9b66bdae75ba250240eae18f113f4e3541858f597a718425837f0155e3bfb08f2dcb8a999b5d08d980dcc2bf092e38e0df6f1abb9f99f3a7cfa0ae5a06207a71b4eac97d59b4fbd3212d6b2f4f4e6a152f5b9b8e", 0x5e}], 0x3, 0x9) write$binfmt_elf32(r6, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f4500000000000002000600ff0100002700000038000000b600ff4e6000000000000003020000000000b483519da37123a13708299f2824c5e4bece67358827d202217115c366f4ef9e21ebc979b2fffdbfa590ac01"], 0x72) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="5c00000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="2440040000000100171134df4bcc13b484d20024001280090001007866726d0000000014000280080002000200000008000100000200000000000000004dc06c58f808a5e63f79d9299334dd83c6000000"], 0x5c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl(r7, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") [ 971.381593][ T26] audit: type=1804 audit(1586748064.989:719): pid=9598 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir832147902/syzkaller.uwTBuJ/911/cgroup.controllers" dev="sda1" ino=15745 res=1 03:21:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x4, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) 03:21:05 executing program 2: r0 = socket(0x10, 0x80002, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) ioctl$SIOCX25CALLACCPTAPPRV(r2, 0x89e8) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = openat$cgroup_ro(r1, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) write$nbd(r3, &(0x7f0000000100)={0x67446698, 0x1, 0x3, 0x0, 0x3, "0322cf918c7b2e3468889b92ff2b07d4a429b4b255efa77b5242c00df4242841446834c2f533282ce7b7d54175f7341d5801f19aae731be2b7ba3e54a9662b2dd6288743a434ae4f78f82e33db3777a932d45bc13ece3a74adb60c9c2ba3267e80321b2cd5cd7acde5a81e1c86b1d78aed32e0be6c3c623cbd2fdd51d091ef650564351df3a7ece4e0c03a999c6ab385628adf8cf8963aa2be0413c28cbbd56806cd5a186b52dd37819e09396aeec8f7f90741f5327094c34dd6b9ffbe6a25f94bffcc9f6c9c68e25b9a734acc2d5770a58efd947b0b96"}, 0xe7) r4 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r4, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r4, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8982, &(0x7f00000000c0)={0x7, '\x00', {0x7}, 0x45}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) pread64(r5, &(0x7f0000000200)=""/60, 0x3c, 0xf80) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) sendto$inet(r6, &(0x7f0000000380)="79ea5e0e5651cec9863b1a36bd40e0f6d017a65fc0c367f9151d8c936688a3499e48d4fc6bbaec9d9a38e324872a3fd8be5df3d174ceacb59834ee8257f4a32d69a594cc3e3b410949fa5844f24cc017c0808dc667921325a59d77d136198c6ea516247ae8a0d7f9640b865b225bbe56df8912fc8404e5c568d9628ef29a1d0003aa4b6dcce23de723ec9f44dc48c0b786b919b12f8c47687908b3deb10e", 0x9e, 0x40810, &(0x7f0000000300)={0x2, 0x4e20, @multicast2}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x705, 0x70bd2c, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond_slave={{0xf, 0x1, 'bond_slave\x00'}, {0xc, 0x5, 0x0, 0x1, @IFLA_BOND_SLAVE_QUEUE_ID={0x6, 0x5, 0xcbb}}}}]}, 0x40}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2f, &(0x7f0000000440)={0x3, {{0x2, 0x4e21, @empty}}, {{0x2, 0x4e20, @multicast2}}}, 0x108) 03:21:05 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0xffffff9e, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:21:05 executing program 4: unshare(0x40400) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r3, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) r4 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r4, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r5, &(0x7f0000000780)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xc0, r6, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1d}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr="64449872fdf883714df8661cc3e0e57a"}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffffffff}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x46}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfb23}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0xc0}}, 0x4000) bind$rxrpc(r4, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000005, 0x30, r4, 0xffffd000) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x13, &(0x7f00000000c0), 0x4) pwritev(r4, &(0x7f00000005c0)=[{&(0x7f0000001100)="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", 0x1000}, {&(0x7f0000000000)="bbc2ff8f", 0x4}, {&(0x7f0000000100)="85e58d8d9b7fc6b8720c77b53091fd071ed94234920c1b95b11c2bb3d51d4dbe04d5c6619b60b9687229e827f25eec8e59ea5c7bc80ec9b9e7fbcd0476580a1c19829c0108939dd02d0288ea62c7eee9fcb58aab45b0e0dc48f87aeae30ab0b28c6b05ba629a7f32569a488a7c20b03c07e7d1e7c8ed1a67e3b43a6615dfc4b7f83523257479a7a331196202ebb9dec6c9e07f", 0x93}, {&(0x7f0000000200)="6a1031b2fc4b7392b54fc656fb3638c8ab475f34ed3045cad2f3", 0x1a}, {&(0x7f0000000240)}, {&(0x7f0000000280)="f931b600d0fd079dfbc24afb5f3fac2a841c80ccc564572ddf52fa46f0837df1b1a64d3e6f46085ecc815f528f3cb0441775f29ce95b628b9056e616f14d58a47afb86bba4354cf6be7d72d4cb8b9cba959423fc5541678317c5fc0c8a00b42be3664b0bfef51ebc2e514d60ea8f4b350ce27fb9d624c29d9403f2db0a02e52f05ba9ae64d7099", 0x87}, {&(0x7f0000000340)="acc39dbc563bd8df4cb99aecbb5f7c7ca06ba936cefcf4f7d5ca957beb4bec969525dba0cf095cf3d508a1", 0x2b}, {&(0x7f0000000380)="7059a1894b93f89f550d8188e6f171c6604884ae3d4d8981a195505bf077f055a6a05bfa4e3a322d749d543e845fd1dea5fb2dd6c32f1ce76bae4a77f2f6e9a70d6cc1add096b9c875c32b614e2cbcb5aa485e99b1a561de604a8f6f54c2cb2a782a0d5b93de2a169a434e8f734a5554b600c5460abe679a63d4054ce5c94d34221196db1246763086ae288645d9eb9973e59449152e0390a3b2a34819b47903a83170fb4697bb7abe662f269ee3f97fc5925f1720e9c30665ff8f39a47383ae007492dd921a0da94717d64e87bc7bfe4beae616bbfc2dece969256680a5dbc0b17a0fe27faf97f012dc9b0fb929e933f201612ef8", 0xf5}, {&(0x7f0000000480)="b467044d7fc50ce9530b6fd85a6daceb9e0d1001bb76439db3742f68eae6f4b107c8366aafd8505d54ba33e02a055c533b88911e6066cffb71bf22f8fc56cdcffda1a0dd28e626bfc7a1b0b78209e0fdc4b4a7c561d600995999d7c667333138fbcb5d74ebcb4d6cf1b230308179927c4544ffcad56aa18fe2715f31800858d2b9cc5db1915e03341a80e144411cd9d1aa958701", 0x94}], 0x9, 0x9) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x24, &(0x7f0000000080)=@ccm_128={{}, "4b71c637f0718040", "662314042ef1bc79de7603b47ac74da0", "4f2c88f7", "9760be6aaeff8799"}, 0x28) [ 971.489334][ T9617] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. 03:21:05 executing program 5: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x24, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3ff}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r1, r0, 0x0, 0x100000002) 03:21:05 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240), 0x9c) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)={0x936, 0x2}, 0xc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x1) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0xd3, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80000000}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="56d0c0ad58f4846e085a6dce8be34920000000", @ANYRES16=0x0, @ANYBLOB="0004572dbd7000fbdbdf25030000000c6c8f0081ffffffffffffff"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x81) r3 = accept4$netrom(r2, &(0x7f00000004c0)={{0x3, @netrom}, [@default, @remote, @default, @remote, @bcast, @remote, @netrom, @netrom]}, &(0x7f0000000300)=0xfffffffffffffcb6, 0x40800) r4 = openat$cgroup_type(r0, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(r4, &(0x7f00000000c0)='threaded\x00', 0x9) accept4$netrom(r3, &(0x7f0000000380)={{0x3, @bcast}, [@default, @remote, @rose, @null, @bcast, @default, @remote, @null]}, &(0x7f0000000400)=0x48, 0x80000) write(r1, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) 03:21:05 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)=0x385) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @dev={0xac, 0x14, 0x14, 0x80}}}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") r3 = socket(0x25, 0x2, 0x7) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) accept4$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000300)=0x14, 0x0) sendmsg$AUDIT_TTY_SET(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x18, 0x3f9, 0x100, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x18}}, 0x8030) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="030000000000000000006500002800000000002f9078ac141400ac1414bb110090780800000000000000000000000000000076b202c650d0de00ba16268b6b5015cb68e7866ed961261890f70b3af3ae919b1d4e5ac59da1252cc345b07b825646b5d3719c45557120b0492197da3590bce4be8e8fbc2bc4f2bd39a8809f9a"], 0x100c) r5 = accept4(0xffffffffffffffff, &(0x7f00000005c0)=@l2tp, &(0x7f0000000640)=0x80, 0x0) bind$llc(r5, &(0x7f0000000680)={0x1a, 0x110, 0x5, 0x0, 0x3b, 0x3, @link_local}, 0x10) 03:21:05 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0xfffffff0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:21:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x8, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) 03:21:05 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000002400e50d00"/20, @ANYRES32=r1, @ANYBLOB="00000001ffffffff0000000008000100686866000c00020008000400000000335aadbcd6bd94205fab18edbb00"], 0x38}}, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000200)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0xff, @loopback, 0x4}}, 0x24) r3 = socket(0x10, 0x80002, 0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) ioctl$sock_bt_cmtp_CMTPCONNDEL(r5, 0x400443c9, &(0x7f0000000240)={@none, 0x5}) bind(r4, &(0x7f0000000380)=@xdp={0x2c, 0x8, r1, 0x1c}, 0x80) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001100)=ANY=[@ANYBLOB="380010002c0000200000000000bd6e305a4eb8a8", @ANYRES32=0x0, @ANYBLOB="000005000c0008000f00000008000100753332000c00020000000700000013000000010069707400000002800000060000017261770000000000000000000000000000000000000000000000000000000000010081006c67841eee9827778864bd05f5e96e00000000000600090066696c746572000000000000000000000000000000000000000000000000000003000100e636a64811675560cb7b21a36cd5093d86dbf7e8381f13d9169127ff909df3ae1c156241a7e31ae360b60c720aab8daa7ee503fec6950e9bb0dba2fe89f0b72ef77273889c43ff46f5c950e1feb75109cb82f1c507671ecdd77d6085b154661a2866b56be191b23cf7620bbb5ccec5f37d053de86ad93706af49297b16ecf981d2360ce856244875321cdccedc7837c0a8c78677bcdd0734046b2927cd54a156238b18a97eb83fb9903fcc5e30eb28aba55199f4ab63ce8b57c2a3ba76c1aeac81b535c9ff94d3e5fa86080ed14f000001006d616e676c6500000000000000000000000000000000000000000000000000000000060030fdc1d77ba0bdbd11a388d10ec8ad688e76b07726d8bb61363d1e06346ac2997f7f036563add55059a4cb82ac4e04945e7b24b467c6cb1331783768aca0dd0505a0dfe170dce509ecdfb4bffbf2c92c8af2caee1cb29ef983813c14a8d7853153bb22151919eec2569e64f7bf3941160ba538d63f7c8eef3c91b9cdd7af29341611b5c08c780f7170ebafa08301fc3800001800000001006970740000000280000001006e6174000000000000000000000000000000000000000000000000000000000000000100736563757269747900000000000000000000000000000000000000000000000000000300010000000000010066696c7465720000000000000000000000000000000000000000000000000000000002000100000000000600080066696c746572000000000000000000000000000000000000000000000000000002000800d86b39487d3e4cb76c6dd3d2ec896d84be84fc3d1c0e41a9af64f3ba6ae391c8d72a417b5ca681ac0c573c4d924342635708c67fe3e30b3bd8e08409a0c5d067ef34789bc222822f752bb10b6d267add087b472472d450e92a32de9dc4dffe4974633b95cdf56788891d2ba7a05ecfc191ff28d17dd4a754352ed44df58462fdc1567a455076e2e6aaa89691d2d1cc619a5f32733ba13621fb0aa0d1adcd6fa07fff8150002fb31ca4d4aa50cf93d88cafea06bc7523d700a4e6199953d1cca1eb1af346676ff8aa90fe89b71429fcc81192020cbe1f912ce4c936ef00000000060075f8587ba977283f1d8a56f96ca92eb7ce1306cb5e8c2fc8eaacf2707d916bef9086d28098ad686f6db6d060303e8662af32000000001600000001007065646974000000000002800000058000000680000002000100000000000200000000000000010005000000000002000100000000000100040000000000020001000000000002000100000000000200000000000000020000000000000006800000020001000000000001005e3b0000000002000000000000000100020000000000020001000000000002000000000000000200000000000000068000000100010000000000010002000000000001000400000000000200000000000000010002000000000001000400000000000200010000000000020000000000000001000000000000000680000001000100000000000200000000000000020000000000000001000300000000000680000001000200000000000100000000000000020001000000000006800000020000000000000001000300000000000100040000000000068000000200000000000000010004000000000002000000000000000100000000000000020001000000000006800000020001000000000001000000000000000100050000000000010000000000000002000100000000000100040000000000010000000000000002000100000000000580000006800000010001000000000001000400000000000680000001000400000000000200000000000000068000000200010000000000068000000100020000000000068000000100000000000000020001000000000001000400000000000100030000000000020001000000000001000100000000000680000002000100000000000200000000000000020001000000000002000100000000000200010000000000010006000000000006800000020000000000000001000400000000000100ff000000000002000100000000000200000000000000020001000000000001000400000000000100010000000000020000000000000001000100000000000400ffff00000400000005000000000000000700000005a40000ba57d2158100000056bf07b426b8000009000000060000000900000003000000080000000300000008000000010400007fffffff00000000ff030000d2e80000050000000001000000000000000001000200000006000000000100000600000008000000010000005f00000000000000ff7f0000040000000104000001010000ff7f0000d851000007000000d00a0000ff7f0000060000005f000000d30900004000000009000000070000004a26e54c000700000200000008000000fffffffff7ffffff31ffffff0100000003000000fbffffff0000000001000000ff7f0000000000000400000000000000010000809f09000003000000070000000700000008000000ff070000090000000400000007000000020000000000000001000080800000001f00000006000000ff030000090000000800000005000000008000000800000000000000000000800600000081000000040000000000000006000000070000000400000002000000540000000100000003000000ffffff7f020000000100010005000000030000005c0b000007000000010000000008000003000000fa060000ff0f0000070000002c96000004000000ff030000060000000200000000000000ff070000ff0f000005000000010000800200000007000000020000000900000040000000020000000300000000000080000001000200000002000000200000000002000001010000050000000700000000000000c00000000700000009000000000100008fe9305f04000000000200005cffffff07000000020000007f0000000000000007000000060000000008000001800000e59e00002000000000000080020000000100000001000000ff0300008100000004000000040000003f000000060000000200000059500000ff7f000000c001000004000009000000010001000300000002000000010000803f000000000000000000000000000080040000000500000000010000010100000700000008000000fa0d000001000000010000806ab700004c3f00000700000091680000ffff0000000100000104000020000000ff000000070000000000000004000000050000008100000005000000ff0f000001000080ff070000080000000700000001000000010000003274ffff0400000002000000020000001001000007000000ff000000ffffffff8100000005000000f0570000f8ffffff0000000000000000000000004b0d0000070000000002000059234834f6cc000007000000ffffff7f03000000070000000400000003000000010000000900000005000000ff7f00000004000000000000ffffff7f0300000000040000010000000100000000020000060000007debffff01000000e70200007f000000080000000800000001feffff05000000fbffffff0000000000caaf35ff07000080000000738f00005f0900000800000007000000010000800080000001000000fffeffff00000000050000003f090000ffdd00004800000001000000bb4a0000040000000600000006000000080000003f080000ff010000030000000800000001000000018000000100000040000000063b00008200000032000000080000000180000007000000ff01000002000000030000000300000004000000ff07000008000000ff0000009e09000001000080ff0f00000000000207000000010400000000008001800000000000000700000068000000080000003f00000000000000050000003500000028030000c1ffffff1f00000002000000070000000004000003000000060000000100000008000000c6a600000101000005000000670c0000040000000600000007000000000400001f00000001800000c2b7a8033f000000030000008604000003000000be02000049000000400000000100008002070000801f00000900000001010000090000007b0800000180000000010000010000009e8d000002000000040000000400000009000000000000000700000000000040ff01000000040000040000000300000030da00000600000000000100a40000000700000000feffff80000000060000000600000000000000ffffff7f08000000ff000000020000000100000009000000000200000000000001feffff0900000008000000ff0f000005000000ff0700000800000001000100040000000100000000020000060000000100010020000000050000000700000009000000020000000000000009000000f7ffffffd405000009000000ff0f0000f400000001000000030000000300000005000000060000000c00000007000000ff7f0000ad9600007f0000000200000000080000018000000700000008000000070000000100010000080000ff0f000005000000060000007f000000ff0300004d01000001000000e500000002000000950e00000104000000800000e5e1000027000000040800000400000005000000ffffffffff0700001f0000000500000008000000ff7f000005000000ff7f00000100000002000000ff0000000000000002000000400700005f610000050000008000000003000000030000000004000072880000ff0000004000000009000000fbffffff0600000005000000070000007a0000000800000006000000030000000500000000000000010000000101000000ffffff400000000500000007000000030000000800000002000000070000001587000006000000f8ffffffe67e0000ff0f00000002000006000000090000009100000002000000030000000100010006000000ff7f0000050000005e5f0000ff00000000080000000800000700000001000000fffbffff0700000015ea000001f8ffff1f000000080000000400000007000000ffffff7f9a000000ffffffff04000000070000007f000000090000003f0000000200000086630000ff7fffffd10000002000000053010000000400000500000081000000ffffff7f0700000002000000800000000101000004000000dc000000ffff00000000000000000100ffffff7f0100000006000000e70100000700000000040000fdffffff00000000ec000000ffffff7f6d41000007000000e1510000070000000180000001000080020000000000008002000000a0000000ff550000feffffff0200000005000000050000000000000041e00000030000004109000001000000810000000400000000020000fe00000001000000a1690000020000000400000093e300000400000000000100800000000100008002000000b10000007f0000007500000088040000f8bc00000100000000010000380700000700000005000000000000800800000008000000ec0c00000438000006000000bb000000200000000001000005000000090000000300000028420000dc0000000100000004000000ff0300000000000000000080018000003f00000004000000fbffffff08000000010001000800000003000000200000005a70000009000000080000000700000007000000010000000002000081000000ff0f000000000080070000000500000001000000000000000010000005000000ff000000340b000004000000200000000100010000000048090000000100000005000000632a00000700000001010000a4000000ff0300000100010009000000000000c005000000060000008100000000000000090000000100000001000000ff030000dc0000005e00000007000000370a0000f7ffffff01010000040000000700000005000000810000000300000000000000000000000000008002000000ff7f0000040000000400000005af0000d1000000ff010000030000002000000006000000060000001f00000006000000010000800100008007000000020000000700000003000000ff010000040000000500000080ffffff0700000001000000050000003abd000002000000af0000008d6dd94f050000000600000001000000040000008100000005000000010100008000000000010000020000000700000000010000020000004000000000000000080000000600000044070000040000000101000005000000800000001a0c000008000000008000000200000004000000320e0000528c0000000000000700000007000000fcffffff060000000200000009000000020000000500000001800000ff010000041500000080ffff01000080ffffffff04000000feffffff000000000101000002000000040000000002000005000000ff070000020000003f000000afcf0000aa01000000040000298f000000000000530b000020000000d0000000030000006a8d00000300000006000000ffff0000ffff000003000100000001000200c74a040000000300010004000000030001000200000000000100000000000300000001000100020000000100000003000100010000000100000004000000000001000300010000000100020000000500000005000000000001000100010003000000050001000400000000000000030000000300010004000000050001000100010005000100010000000000010000000200050000000200010005000000020001000200010005000100030001000300010002000100010001000400010003000100050001000100000002000100010001000400010001000000010001000000000004000000040000000500aed305000000000001000000668a010001000200010003000000040001000000010002000100040000000100010005000000010000000500010002000100050000000100010001000000050001000100010001000100050000000500010004000000050000000500000004000100020001000500000004000000030000000000010001000000000000000300000000000100010001000400000002000000030001000200000001000100030001000500010006000000050000000600000003000100050000000400000001000100020000000000000002000000010001000400010003000000000000000100103d03000100040001000300010004000100020000000300000002000000000000000000058000000680000001000400000000000200010000000000068000000100040000000000010001000000000002000000000000000100050000000000068000000100020000000000010000000000000002000000000000000680000001000300000000000200000000000000020001000000000002000000000000000200010000000000010001000000000006800000020001000000000001000300000000000100000000000000020001000000000001000700000000000600ba58ea5021cb227b527d9ecb9ff5749e48105f555743fec85eed76095b495c1d9e30e69ea179ce86227590591f19a3a4729d5777e8aadba619a669728ec57d5b7fc5c270274ca27f49244b13dc2cb6a654100630553ef79a030876a10d00000000000700000001006374696e666f00000000028000000700ffffffff000007000000000000000400030000000000030001000000000800000000000006000000ff7f0000000006007a30a647f83cdb5beb9f22e5ed202e000000160000000100736b626d6f6400000000028000000200020000000100008006000000ff0000000080000000000000080000000000000000000300aaaaaaaaaaaa000000000300aaaaaaaaaa27000000000600a771b1f5ea40f78e4390ee6c2ed332217560b1d8f465368226165427a42c6125443a66afb17fead92d043f925e0e00ba34776ea64b88ae4b14b4020fc0aff362451ebc644f8d55bcd6469c4ac1ffcb912aefdfcdb2f85aaf30ac87934d3b7987f43339335fe740b2f3855f5cf15b477f431681e9a3ba0e1c01812066fbdea766bc6aaac02dae7eccad2f3e26c460eb00db649869bbaf22813d71b3652c611f433e9a38a1e04985307c7a3eac421b515625975f6ff1f80f3190c566a05854814976f4b9ff0baf000000000c0000000100766c616e0000000000000280000003000a00000000000200070000000700000001000000c90a0000cd00000002000000000006001ad0f4eaf105b20762dd8d9c9db08f126f978d62b5ba3743701779c47338b7ecd43209b81b98fcebaeeebc9d28056dd186572e63b4e118aab106e9d4de175b22c20ae53f0cf712bec6147c695dc9e4546bfa09ba0587f0855cac29ef90507d9551fd17265194ff2de313d0d7d96230248e16576693ea2bfb0c148411d84a30281cad74403dd47be0a50d843614b8914f0f0fc028b292afaa002f6996e54b106199635cee000cc41a30000000000003000000010078740000000002800000060004007365637572697479000000000000000000000000000000000000000000000000b1000200cb8284e2a6e06aa990430a292508bc7aa0c893aa588e29104276c26d109b23b3ba901716000fae727134457ee62ac2959651c2c3aa6d8955a33764983869628bcc1bfbc67c60f1a80b8378d4020b9703249acc9ae6f0b02cf56603c22fab3eab972f2d9fba88f08a9d35f3174b072f3ef07c301951b75222cb4938dbb9cd9145900c4563ba9828d0fb634192f935f2c90ea1d9b9a27c30d059af94b1bdd26d2af7ff2f153bd6452b91265d3be3ce044f47097bad3d616c1a96faecab0077c92f95af7fb571694a87d91f3ddf719fae26f48543486abff0d53926fde679b65ec91f7f6f48da164f745f69b575770ccbb1f37eb8d7519ef9b625df5aa8510806b6948c8c47f6f3c798c00baa745ff1d306ab343d3404281ddc5cf6706c48694656b242a8dd2f880aa34eefb9debe66c1ba122a811025319f74d9128d99ff2fa0b64e955d716b3dd2a8aed6becb3bebfaf8d8dfe2a59a9b49fb1d9cdbb2758076084a4898b452ce701e183cbc0da07701bf487d89f455f01dcae47bf938ecc06f2c2caee026cb3462f6666d9aa7032071272f3a271558a48a2e8302c61e1f95d2a259211170470431eb079d1fac2a8245a6e1e4d4611ef4f2de287cd54bf780f60abc188fd2dca0154d3341abf295d455e18bb771899ab176419998e6525bdafd780a49f03d5124c478c6bf83aa0f6947af47b5d16d600068e3738d4cc9464fe52ee1180cce2fb732e3e120ec6f2d62e151e6bca83abb37309c14a0b1b8f996068b97fa434cf42ddbb08b06f69fd6de4e926713dc0c391d891767681f456659d956cf2f6c0408593619d4a4bb30e34b1a6c15e70e838ad4c0b78fc34aafc3ddfdc57b5dc189860544d93f28c600bb31fa16d0def2f1427bdeb395daa9cda8c32abc505f93890404638fff29fae063ae55067eef728b945489052dca05d31065ab3d432a00a476494c95b1fcd6c829b798f73c26bcf760f83127510a5f4f57692eddd50f838fe90f7f90141c94205327bfe686ed31e18a2ec3e1976b1c64c0261ae6eed01b2b22c38271a5da2adf874da40c19e30293ba82f41d275a71407c7d933eaf76ca0d44a62bf90ad1c830974a9e2d375cc6492f9bd2c9ddceccece6f791770065711aa306be09bc51802258a7bcfa10da42ae0be50315d689ed6f5635a86d12d75cb6228992e8811dde9751310bcdd48806bea3010f5bf92e4c0c38ea01aef8a22e0476526c80c33a37aaa097e3a9fab892c6b2a4e1a0d0af950f6a0288ad5979bb21794d1e2da24eb868346a7e3de6d270b9bba3793ca18dc3f9100365a49bdb60ddc966fd38dcec9641be0b5e841d26d09a3fbf456a328daf4c49a0bfe33fd5da0ec5d1164a640e1700c75929765a5e04d97f07da630c0d5481e1c354ec956713fd16ec25294e31131f85314e492015e673cfadf205736cf94a745af0fd2e2a534a97eb6dfbba47079bc3c223752384d8e90137845376e01dc0b18e555b46c72fa2ea45e8050a88c161c13cd81d2e71ef0ccb194858a2a2a4dbfd561fc743011794d2cf5dc9d45933fcd89ee5f023e344bcb68b6d0675cee724e63760ece6e1573576d6e5f17ce59e7a6f1a3be76ba0dcea3ca6ee802174f23140a6227ba33e0487f48d546da7c64f6bedb894efc13585f53f02648695c1941fc20dc04e6c53d67813f1bd4de05dbda6452a707a8ba95febb2891d8cfb279b5a1fbbd1d9e2dfb056a084998492f88d6a7d44b690c131c61d8aa484ac250ddcc0c3f2157ad6eee808dde297d98d06edb73037c9d3db07f3a7529ff252f453042485316f927420b95dbc1b43a4014a3523010d512c23ea22b442c913bf061a975f05f19ff984a613c2f980c7986f0a0171e87074db4877a8b9d1ad267f7127ed8187dc22c6ed4a9d12d04d8bed33cc812b29a16239aa4694d217c6ed8524459ab0796cdd9466edf08962e28477d73efe7f6f85649748ac2a87d0489fc2c048d2847101913b4ddcba80f0fbb0aad2a1974bd9fda13355e6ec0f6cf7a32af69535a5a19626a7c61deba87ed1ebe6a47358e651cdda94d772117a7a234db67c2d6af59046d8681dbaaed53d1e0ae0c633d23cf10365cc9175a562fb812569342808f76c06f210097d53406ba8d126fbde76102a422ffb4c46a7a3ac571f38665000febb95db65ae3ce5bc0e4fd8cf3e8a95c22fe3b68db845bbf91d02867531b1977ec3c1f09002fef9e885591377ce1d1a5eb82f68fa58887f93cad3e3d4a6c48ce2353c5d0a435c75bea6f6d674b1854773b3d52543dcd4bd6dbfc253ff5a2c17f686199e9064fe912cbe84c2a7cd2be15e729de100183ed7f2c0e736fa58f5ffaf0dc4e0aa5f784f15ccb94eaa4b81a993c04a1ec0ad3de9869a3853524d767d94a1f9c4e5356d7bbedfcac077842a910e438686498b0bdaa233ecd861b48b983f1db1bac1752ea787505f14c99b1aa7d910cc2e4309f9a4ea7b2c9f2b55b96412e2147e090a95fc99f04feecd308394f5b001f5b3458f739243d02f67e88ffd391eea919c4e23beba9569a5ff9624f745282b10660e0e2797462bdcd3f6dae5b47e01bd986c699c5c7eb787196ebf1b14c37a51b2c2c81c838c09053885aadede51cda93ee840905d7561ad71da947cbc19ff0f38113604c75e9948cac8b5a9cca423679a6496327a88026655498f501803d846c27a86b2d4f6d144c8c2648ae750119765a62c01d1738880a6055966e72082a02922073121c2f238c0d23903316fe3100c0a4a4fb9d42526861fcea2a63504326f2cca3f9285cc50e4bd1fda0b7a201bed377c953d84b864afa0b20b07c48149026ea0b578d0f022d5126e9f19daa1077c20c47a95e52cd771ccec053d108447d3eff6a56990937ae5626629358cd7a8bcd13137f2642fb6d3db41764e06f97f680f609e38dde31f222d001a888c01942d21bde365b6510ca206c816d7b7e3cd4e0e11cc97dda421bb4176b7871bb58a5b2f1508872c5d300116fcbb092181c9f68490e43cb5959a14c1da923851f464be75f6f31216366887555e78d8b05ab020e020904f7c0f789806e00d13d9f46948c1746e382d094912e6dcc34316b80cefee26bfcba5575d266b913b9b237e8ce38597c6d7179867ea4519adb6069526ede0c8b70f7b272480b336c528c0d494976dbdf6fd1748731e109f7d4ca95b20342c0f6e5625bbb3bca4a06218cba52ca87bbdb582311e9b6e56bb025f63f961b5b90a4a14cd397f24e84981a736d5697c416bb58434510bfe0ff4746dbc132134c8acd36bde3c906a5f73809300c0baf597b7e7ee98f2acbb3dd4da2a54ba459d26c5a75f92557c625c6adbf8eb35ecd7e40aabbce6cc71513ed56c68891168d0eaa3a84c585bc418911435d9f3b21d171a434b7aa55a943038b820bb63615b73cc9c8e3a3ef20a5f613a12f6da6df31c8a7c7c0e060328e75721f5d08d2aa62b11ddf7fb423342cfbdc4ba1410bff6f5307e83342c52c837bbe74e559a32b69d1a895e25706063309feee551d96e308a8312424012e27c6e0f034ec90007960f1d2091edcf5b1036829b86ce5e40c1c7602de0e1dea561b8150b87839a6bce4eb0acde77756ade6da85aec724274056c0008c31e39f4c09ef38af0b6ab6944954680fe3b508436c91de9ffee8dd70059b05de9582342ec311d6b7a451549c328954c2fb8dfbac7be29dceeb5cb5c366662a15a8d8b69c7494e61a8ec7c3309dcce8a733b0000b1d4b7670bf93f32cd390222950c7b0e2fa05907623cd2731b2c77b87b295dc57cc1315241acbcf88e7c30af02448b4a9510287712cadaa7bc012e56145ab227bf695e0ea910861786d64119652358723459cb78cddc95d9b67b8515bb38c9c76789124d1f9f49fff12b940d9c755cd9e8b88f18c795ac8a8f10aa1462bf4f8b7a834f1d1728bd694f57838c59bff6196ef61246de9c866b2fb0ed1ff985383ccccc4a50a6ab01264e54e57684f610dc5424865510f3086962e534b8183f465e7474d5b8b3b18b4000b2533d7e1583c4a246689b36a84aae0b2c681fb30e14d6fe91d1808345ea41f13fe64bce60d77a281e7a2b3b52ae2d11f070adb528c60a8daf93d009dfc1e6b04b48840fa88d5b5fc0c82bd4c70c616695e5d58e73490c798f13da9b63fd8d68b2e35fa7131b0a80b9960b7d95670196b542d80e949908acf27b0370fd00c77fa10cd912fa262479fd3ecb763221eee87179e966bd7f1d8ac66d0152c18eb3f1d0bed08f61935ef7a04233098300a572bdc82248da68663849f3a10fa102a0a61a8d262268c37873d1a545eea453639560357b879bf339e82bbbcd5bef5c7d60602f705425d8017387b498a541deb8c469de449cf556730df3126ba6ea6238f3e5f876f92a22c3cd84782481b4b822501ed2e42a4e7194fa25e1ee6995e80c766b5a490192b4768f139c59031eb1b98fa1ebc4c343cab6e7d078679d7ec6b39911f933cbef1c86a9803a8386b448057cf7cc46c05f2cc3257daac71a629f0dba17f2cf2eb1b5353d96fa8e1fb0acc1b5fdff121786cee3c9a99584c048f19e67f8569d659afe6051fb5423f0ed310aa44e2b8015635bd8f830654ac5b664ef28ea930ef5e1cbaebee4cdcf3d2435aae069883afaed26102028f383e0c57b8f22a36ccb67d324fe7761c1056ce949bea2d470a180d59082e1d2e04e5674bcd939d67a9a9ee00d2892b4a489a9f0c912f8e575eaa91eec3f8a86d5d338ef41cfe459767abaf9cf3e2c9c0cd9015374f2499df95b3649b69c461ca18f4c3e1e087ad3ab2ba42167df8b0d6bc08bf00018bc638a53ce3ace8143da6443040545000d751870bad3201eda6d25895ba5e72899cdca1173124d91fb7e39ed3512f549b7cf354a5c4324cf098d19e1706511aa3a2337a6de4288b3c70f167ed40af29e009b49ce73ee00f70143d5d1d66e75038ed7a50cc52ca58b10e4cc5d03b1d3e155ecd23a28a2bfba98c05c3a11d217cb850ec022813fed443ed1be68333ab29d5cc3c92f4e15f7a6cab634701947c71245647b7b6000dbd1f0f26531036db1c95faeae839ca7fa0980209d56817863a44ab3bfe0571efe97eeffb6f64b38a4bae3b7b6054c3c7ce4e0cdb9de573994b38cad7cbf54225f0788203e1b7a03f31b0cd6c41cc3f9c1296eeb618f339fa2b368af4f32c6985b500a46dbc6afe76d6079ecd4df79a73b4209f7730985e3bd0a69ecbab56511472e12ecd9cc73bddedb0e9143c33c95d51a1573a2baa2ed3445678ab46098cdd71ff5eb7c827659728716956c383893b917c763681a9d85c38240eb600c123da4e7c779ab73509d220e15870b71fbe2b34e0c4a6752114cb74fd92133929a5465e4374388769db1dfd2e277deefd337742adb395fde19e0fc679b5cd6e1b61cf8c0505f3bf5b80be62f0a9c01e1165e612dcd4416551e357756178b2ec3e6f77ff23ae56a630ce6678b8fdec1b5c223cdbc7cbbcff41b80e284246cf1b0f3724d9d0dd35199a4d3c8b757f978e3937920d6684926ab05c4c295f07c7844f2547ba2fb4e3ab704f079dc8ae349ed13d4c0ed05afd085b778fa6646efd67efd66e7c6c8decbabf9c6b2a163df6674ae345073cb1ec5da1fe8af287808ec7a0cf2321b37b602eff9c0f5ae1913b6598200ac622d61ab077377712feba1e83b730614fcf12ba76d1fe285d0f8595c1be0335b7e54ed03061938c6bbdcdf987f834973aecd45379d6506956e1f0e6c8fd6bf246e715025f8dcae5b1af51a1ebc315beb3b3af2b733e80c7efc03e40000000003000200000000000600a8c70ebbea711199a11906f217cc42eac65665a5b118b3961f7c3523b1ec9a4f0043f4af680b8e3a24022fcd1e3f48ee9c3fc6ea19175341436be16be50e1bd375d8e36f4b10c9ce7a2a18b68d22439f0014ebec5efbc299a5bb2f6794c48f4ac3a10b126cafecbba51bbd5c33dd1dfdf423bb7a4bc79382bd22e48e7a3f4fdf9fbb970e3cd894093940de1304bcff3d25b073cd1ba1079946358e9c745e5d68457df1dd50b7a908285befe0d7ea1bc08062e3ae491df365352c50ddedeebcb20ec12c27616e6b2dba76c4f813d44d1fa3d514596489216f00da8a994cfdf9d36f055caede195aeed39b514e3672af62525650eb73b29fa20c54b9ab8ebfe764f13d87749ddb73af9a82b0863d24fc1221a4aac20af6bb79ecb366bd42f0ee767d60abca89e95b3c0cbd2d14f69464783ed47a69da4444ee193ee22b35b99c1fcf525cbfab6a778f37fc76c79aefaa1db58c37449c1955df23995f8f0ca5ae7262e60b6bdf98e12dfcb1a197f224a251ff85c5d8cfe86bbcafc19ca0e058490faee8950817589be51c62f6ad45d139c7c23234b8e4a522bab53e05a1a9f53877821705ef7016f041504a250878fe41a7565951b1ca5566798de0d3e9471ed9f23e7dc9ca7411fcbf102ff2037f50ce2327bcf67d9b2c8d3008da5f73208cdd3a9aafc747749b40235ef99a80476510af2cf10508110b7b06f64613c37d2213979ec65d64e765de470f2c373e7c8718437fd170e3f3f2c876b5b3ba764119049592a5ed1d70d73cf31652bafb2c61ff5a05541fcf39fb3a8035e96b892eebae8235703066a51436fc22014a6127399ec6689f0870b9b090a8a29b2a853ca29f52e4c34721b6adb3f6f92a8c765c4f8f74c8c88cbd83922e01aa31d553848d73a394f4352de45d238fbede8ebae02946e54f74d3af1f6b9ade50fecddbbb61a4afa0a6a180c8ae739de4cdf592c3ec94398c6d0363ea33b095fc80b1bacc08480549626bbd60b7100c954b3c07c7641bce15f9f714920894bae2f5bd6d43ce306ddebeca33562f36c671e6ed64301fc902eb0d7de3e87b348659ed960edfa5cd562d1dce56c0bb14a361e527ebae98e294fa8274a682dbca1473600a242c38392605acf8d1515e2083ed79accd4b8f39a76aa6fe51a792473ccda1eb06f926356e5f6202fee994ea0e1c8737a2fcdd4e01d8865ba41944b64351dbadd8200e9d8f04f014a64b2d5f2a2b522168aa38b5c1f68f8552177126a0aa5fe8ce674ac50dd4739216a7dece3bbed846cbe8e806b2780f5e0f71294b3ccda109c4737c481637ab337e1996fad1dbc6c568cb667e593bd7eb3d991d8e9736435c0237725ff61f97d8e2fccc60ac469e18a4de6f59488b0e3b3aa6cb73c0cd31ec1d5f1074cab6ab010f6c2dedb01cd8a3033e7d96f3a01376afd978e9ec057687965969974b19f0fcedf9d8bd85d17ff60e0d204d23b07ecf99ac2635a28335cf6e09888b2012c34ce9b87f9adb4366648975fb5c61e3fc2993fede8f285d4dedcc5928c9d35731ee73ede7b6a5366822336b0ad6615f656b140a649ae0542f4ab5c41075edc736ea4309f78bc6708919295f38521d6074d3089814a415dee5c86381afcd4766e4acf62954643df2645b152f66a5cb61f443cc12e15f03242a6275b6976a3b22a9750324a8256e3e170230fd1143b1b53f1cec2fa93f9d6c064c020a6bb8631d83f8a1eb4d1488c1c2bab951c7e627beac555c752acd0bdd1bf29c315213ed3dc03c1f98c95b329e5ceccd46a6f6c33e8a5a207a070c3daeeab45e64e22c369a41933f5e4c15ceb9fb094b83eea223b91d54e720aa6eb906833ac217552696851c3c3050bd33caeebf3c96d32556a01a0ad8dff14c397dd101d3a758a6693a1fae2f80c335a5010e4bb21eec232ab4e0d414d7ef216d0f93cc7601d93960037f2dbc2bcf1e08fcc67c1af84da6a5706f3cdc6d1ed40cff277aae4662995f58ca59462567b897918f8ab313f2ba5737ed65355388709132dfdd6b553b65d4052e63f22d61fcf07c8b5bcc5e53059843c17e4d8e48daeb7749ebf0233f9ba147a1cae6681a8ed46aef8e6ef73abf2caff2a2d5101312edbee8a991210417d4bb9b51c2fd3b44658be323e6da8538048bfd9bd0ae48e40629d3a8205f498ebc2d6f720974b774d8e70474537fc5e23c670d857f2d5dece44c1216fd40bde2e5c2bb92ff50b38156b4581e281932709eb1a5c057e3fcc47d00fcdbdc9ca747ef0d4c1b19440cdffd555574051225ee99094e965d08f8ac21ab7796e10c87836e43a5ddc20eafaca73f8f89db8322265c11824ec6685204c18b3296ea2480d9c7b734bc2595ecb9b050668b042342befa4254f4ec4403f6e1f5df7d560c3bbc8eae69dcd8233b3e16c89a0111d75f11c6336b9978fc92fbdd44acd510916ec9f3607aacc15786d3a15b006314505c92b901bb74d27e7cbea4b24fb8f2efa6080693949f99fe64784fdf2343bec087a9e335afdf1ed5df9a488ab545999d71ef732735729ef4566e524441d6d81e718d3f716d8b5f381df61145ed50765dea7d4659ea06276a7a7274a50ecccf4f07a40aa46e11ee757b808c34d04abb5a6b455edb71e2e0efac57f61c5de8a823429d0b2e97a63c934c181dac4009d369f55124334be1d6bb550d7bdba680e165fa29a72860f9c4e2b81e66adc2c94cf2d948bde22dbf7f172585cfaf4a6e2dbd49d779e1c10c9b17e2263681513a335cc9abf81af08474b07aa9f8ef40929b433066706f837eb3c844a84eaa951102ea10c014466127c5471b9af8a3c1c6ce5e381439639c571ae02b92d3c8d6aea976eabbea835a029939371450343c02cce5aafd40f4f8caf3216ff6aa2ebd8e99f9255caf1199a20d7fd1cf17d3e682a4eca30a3335a68201e6cf42e59b2f32f918ba12d4e03c53f479c6f26001d45b47b11d172d38fcbf173a7d68305c4e9feed366db5fa6f6310e29b9e10c7058b625409270d15b76429029d3b281cac47d48f1b1fecb7aa1a01af40825ff21219389984c31b932b9ca0f33a839598df1a3c19f48e0ec62ba604a78630fd2becceae27e6378fa63a384a27bdba286cb8b270bd40539e5c5fddb51a7f6df7c8cf5564c584a63b446b14e8d6c5c9c547086229e23c69ea9154c458d6374ece8dd33709525116dd19695288f174cdd252a39abeb4f37ffcb6d1fc1ec069adbe23954dad1ec34e5fe3f7747469d30180a2fb1930f07a138aca9d1d1ed2e6085be4430ce65f80aec901aaa119f9f7baf14c3a9f61313b5976aade268d987ba709ee5fe438256aa731490550ed271376ba4afb9c64beeb924abc1d795be7bb2cd4754a00d60767d49110f861406edc4016bc1b5f1549630059806ce1536e79725f7c2a09c9cba7ef170390601d838ea1a6aec7298f17416928aa339e0358aa61ddf6859c1f3c94353845a73a8d5c5f8f043a20988444ec3c1536c4583734ed3d1bee3b4334b4d7210687c6c3a6e9dc0148cbc96c9c041aa6f96ff28870ae37ad877fbf06787994d6dc60a0f11284581da99aaa780636e6ecf4fff55143fb49d1b8d709967693526b1e18d79bbd9ce2cd15d347388369b972d00eec4ecf7c14628084ac24dd63f6e11a72f27849932d7ae2f535633b976b91f32f1416f59bb3a7352d58a77554b27eefa0604fc48051a8e397494a8ba6d1195f66e92ef480985889fe1b285abf5ebf919a38bcbb62d725dfc04e2390686d22c5baab29393d8bcdbd551435addf7a1643b3e89cffc05297dc126f49ab556cd53d2ac8dfa7a9f2a4a1b3e48ba490e8b43cb8763501bb3f2d6792e08489559a5a3fa7a8c82d28fa704609b592ec8d6bf951dcaaed5ac4701549b8261fc24fc4c3e8b0a1d872e77c2bf35ae4f20610d7263a24fca38bbb21dd465689fb207d07939d0816b59898c54539966958afec6e76832f383f7901b5724e71898a53c6f6f0c77de68cb63d0aea95d528bbfe081fe4c74b13c5158545d9b988e6c60709dde1727f475b4e70e1ebf8c63c4eb58cbe38bb6c71ad187a598609e8c8075c68d4af25c1ac8f103e2e1fcc78e4e6694ef530fd56eb6d98c782190b85074c18d4c2e97a3ea7578f917b230a22cd348321173634705bc51330f87d09e7e48576d928e0b121da76356b676c763bf6a77f060c9e1e427bb5f6bb20acffad50593a803333605a31c21cccd80392b1a3b69be12a3b6b3808f936f969112c6168cadc5f9dc579bebe0e4bc446df8173c1ffeb7a3eebd77910bf6c018922daca846409477a0fd07dc3000c261cffc3cbf2a927c4b23fd94442a401f817c98f6a2eedad8c2883ad47776f74663ed16089c4be3f2ae7fd789e319d76823e43a65f41b4c018bf0954c9c394735d22cd59689f6f4f9be0aa52236059dfa68e9b86934e32759c69a338a0cdc5a8525c126d038f3eaaaed3f2c80d6d5a2bf30b33e313b1685022c1c53fe995aad9bd3a129da7a9e4a01fb5ed6c7cb6f0faad0c6e283f85f8cbeec31a6558875150c6e83daa528f59ea294818912171af0697045b03bf76824e502f5c05076170368f13aaab0ac5bb08994fc4cda916ed34f3e2a7c3e0e5442f0913ffe616514226c2b7266640a7069a5665d189625badceae6c12e1f0bd7d55484f7c069048c8696ea63ae6bf4628f4f1fbb6b846a2c4bb3b538492a4507bfeb21ee1d7820c6fcd0c686dd3350d1b7b19857a505834d233e48b889996a9970e03fed0be1a66b474f2be319e8b4147d5973ee93e516d5f5f952a6913e353cfdc573f7db268d908e2a4fbc821effbee2ee412ecc260e036c75dd4aa93e69dd305919fab60be9a139726dd91191bdfbf706007890053bebb302f86f3ab847da0fe7df1386cb3d7f561dc98f534648e3b857a177e76e6f59fdbba5ce2167269ebc2bed87dda3db081dd34a6d0c3e8a5dfd133811cb2e0650a37b8a81f2fb246ee8fdb72c9f37500a67ea016fcca91156865464f486041db64832f3fc10e4ad61ddfb34726f353d88119360ad24ee8983c8351e65dbe82464f738a0ba5d8371880b928256c10fa08cf91933ee646466afc6d28fd8a19e07b4359361d94df3bffd96b08df0f391e5670a67ab40cfc5b9685014cefc659cec9d2b60e15890c22ff5a9f5f971f66f15169757c94fe35168c8b849e8718b1f51ceaf10a7e7b3250dd997a4777b03449d054ad062f352458a4cd0dfd9f1839a24c0095c56a83e06ad09fc82f796c52d3f8220852ece05c4ae3cd4cdf28436bdd0db7abf0781f987296f3d7ef2d502f34ac9df237ccb9e595b1048aa6a1908b3797dc84d87889f48550f5f2a308b0f6589b4eb771db45c6c996f6fe45c8ef46aa65fb537b0e4f3c4099e1573850a490f7a32c3b6b5cea139d94b04727cbd84864f2ef182d811e91c57ae68ca2adeb551ff28cce9734b6a0adf2211a08fcf31527d74db3743b02d72b8a89f58118d3906b22a206105c73d576328a3fd0da586184cc252f129da60db9d8ebdd40b8e666a29723316c48fc48424be44c9b165f6619c61c94c901379295827b3da3706e9ace54d9e7697841a03f6c48a2ffc1c818692c0449288ec8cbddefa2d0fcce4d329056c1035407091f31b2a6370718a7bdb02357c732cc00c3b00ac0147c4ceabc44d5f05ca7c899ff8460c5e7eadbffb10f7b63fbc6d260a08368b6a62a42125f155b2f03626981a5d444c1560a3c0914b503cb6e4e6586ca447a8574ef8e35931eafd7d7ec7042a3ba8c1f6b7eb6d78b96977ed6984d635c7d79677f2fa5a60608f0000030000000100766c616e0000000000000280000006000000000000000300720d0000000006005c135d16abebb94124d7707ddbc4a05d55b39e4dc8e95e65c3db3ae6778bce20abd4d02113350c3051c71f727497ed957afd3bf477e0d81ff942b3d9a4f0601be1004fe477da008d74181fefae66ee9d28f0d358b145252e0efb0c3181c0c630cdf18dd033c0e9c4205de267fa91f29a8c46c210117503b9f5eab850edfc92fd70acb12faeacd2ddb0d5f9b00398164287a2afc06b9455066a435327bb49b25f0e46de659fc76741cf0cf768eed1cd71c2e5b2ec1c1be11b764ad32ea02a0c65bc84ffc08b54abe53fe98ced60c283489b6a34223090d82040e20c020ed9dd57ba88c58f2da582d97ef22cec5b96718d1ac10bc8d3dfffe8ac7c0000"], 0x38}, 0x1, 0x1400}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000100)={'wg0\x00', r6}) socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000002c0)=[{0x6, 0x0, &(0x7f0000000100), 0x0, &(0x7f00000005c0)=ANY=[]}], 0x1, 0x0) 03:21:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x15}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x44}}, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x3f, 0x5}, 0xc) 03:21:05 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x1, 0x2, 0x0, 0x7, 0x7fff}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000002600)='batadv\x00') r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="eba700000000000000000a00000008000300", @ANYRES32], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) 03:21:06 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x24, 0x7, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000002) 03:21:06 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0xffffffff, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) [ 972.492142][ T26] audit: type=1804 audit(1586748066.149:720): pid=9668 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir080444537/syzkaller.UzUSE7/722/cgroup.controllers" dev="sda1" ino=16218 res=1 03:21:06 executing program 4: r0 = socket$inet(0x10, 0x400000200000002, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x95, &(0x7f00000000c0)=[{&(0x7f0000000140)="1b0000001200030207fffd946fa28308070019000a000000020085", 0x1b}], 0x1}, 0x0) write(0xffffffffffffffff, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(0xffffffffffffffff, 0x800442d4, &(0x7f0000000000)=0x3) 03:21:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0xe, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) 03:21:06 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) r1 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x43}, 0x10) sendmmsg$alg(r1, &(0x7f00000000c0), 0x49249249249265a, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000080)=0x8, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x48, 0x0, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f00000002c0), &(0x7f00000001c0)=0x68) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='rose0\x00'}) r3 = socket$kcm(0xa, 0x2, 0x11) getsockopt$bt_hci(r3, 0x0, 0x3, 0x0, &(0x7f0000000280)) r4 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x43}, 0x10) sendmmsg$alg(r4, &(0x7f00000000c0), 0x49249249249265a, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00012abd7000fddbdf251400000044000980080001000000090008000100020000000800020051ab00000800626052a1000008000100ffffff7f0800010001000000080002000100000008000200ff7f00000c000980080001000900000010000680080001000600000004000200"], 0x74}, 0x1, 0x0, 0x0, 0x48004}, 0x0) 03:21:06 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) [ 972.692835][ T26] audit: type=1804 audit(1586748066.349:721): pid=9685 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922123606/syzkaller.TgTSaq/711/cgroup.controllers" dev="sda1" ino=16244 res=1 [ 972.710265][ T9686] validate_nla: 12 callbacks suppressed [ 972.710291][ T9686] netlink: 'syz-executor.4': attribute type 25 has an invalid length. [ 972.800150][ T9686] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. [ 972.825383][ T9698] netlink: 'syz-executor.3': attribute type 14 has an invalid length. 03:21:06 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000240)='wireguard\x00') r4 = socket$inet6(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000280)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000f00)={0x70, r3, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r5}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x3}, {0x8, 0x2, @loopback}, {0x5}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg='\xdb\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff'}]}]}]}, 0x70}}, 0x0) write(r0, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) accept$inet(r0, &(0x7f0000000000)={0x2, 0x0, @empty}, &(0x7f0000000040)=0x10) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0xfffffffd, @local}, @parameter_prob={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @local, {[@ssrr={0x89, 0x2b, 0x0, [@multicast2, @rand_addr, @multicast2, @remote, @remote, @rand_addr, @rand_addr, @multicast2, @empty, @multicast1]}, @timestamp_addr={0x44, 0x14, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {}]}]}}}}}}}, 0x0) [ 972.877038][ T9693] netlink: 'syz-executor.3': attribute type 14 has an invalid length. 03:21:06 executing program 4: r0 = socket(0x10, 0x80002, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f00000004c0)=0x7, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00010800f9ff000000000007000000", @ANYRES32, @ANYBLOB="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"], 0x28}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r3, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r3, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) r4 = accept4(r3, &(0x7f0000000180)=@xdp, &(0x7f0000000380)=0x80, 0x40000) sendmsg$NFT_MSG_GETOBJ_RESET(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, 0x15, 0xa, 0x201, 0x0, 0x0, {0xc, 0x0, 0x9}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x20040010) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="020028bd7000fcdbbd250f040008db5d1acf1de47ca68f0c107b68ca062f6978a95f29536bb9110c2044b74a911fdfd5e9dc9e99767e5a219c951acc17bec92075c401193e42c07a25ad7777cf116c4f9cc3fd0f158ad65c0bb950cc49d9df70bd916fcb2d6524874cefafea3e06858d3d3e1f76164b79ca09e04dcb10b03e766d82f9d4ee316c5593f2dcbd555e509a8aa2763616f32626"], 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x90) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) setsockopt$bt_BT_RCVMTU(r6, 0x112, 0xd, &(0x7f00000005c0)=0x1, 0x2) sendmmsg$alg(r0, &(0x7f0000000140), 0xd3, 0x0) 03:21:06 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {0x2}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:21:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x3e, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) 03:21:06 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000606010300000000000000000000000205000000000900020073797a3000000000050001000700000005000100070000000900020073797a3000000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x8805}, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x2, 0x1, 0x0, 0x3, 0x2}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") [ 973.066285][ T9703] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 03:21:06 executing program 1: pipe(&(0x7f0000000340)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280)='devlink\x00') sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r4, 0xc91add0bf88807dd, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r5, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r5, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) sendfile(r3, r5, 0x0, 0x100000001) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") [ 973.114756][ T9710] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 973.142733][ T9710] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 03:21:06 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {0x3}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) [ 973.267147][ T9716] IPVS: ftp: loaded support on port[0] = 21 [ 973.294692][ T9713] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 973.330888][ T9713] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 03:21:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x300, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) 03:21:07 executing program 1: socket$kcm(0x10, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e0040000000e8bd6efb250309000e0001003d0200ff050005001201", 0x2e}, {&(0x7f0000000300)="23bae4b960909812360bb4282c71a7b2c9cee7a1745ddfadcd530d447a9f5fc621cf7f5bd1bbe8b5f21feaa23c3d96a5e2d5b6536c93d36a87485f82481369be6ee338d731b9a7389769109b37f41eaa44f51e9670d87083a6881a6abc431e19e14227a2c2a20aa7c14ac2967b5a2e1af6e4bb006f86e5f3f391ebe8e2da92062f92c42e7ad01d4b", 0x88}, {&(0x7f0000000400)="fa7df08a71c3395e07f8ae87e24e83caf893f75c7ce2c29db36a29e120a94bb0869901feef9db074f47f6a37ebbeb416d712de7188be7e66b11349cd94d7d9933a782a88", 0x44}, {&(0x7f0000000480)="a5ec1995827ca74ea90ec8509996bff1d09dbcc97d3b52253b7f1f8689e8494ada5dd565dfbdae120eaac90696572b8d34e2aa3b43c875581ea6bb1eaf0a66c65acc6d7539404333b4d9898d54da0e29f7bc4f3e7521ec0ae1e2cffdb18705918e413effd3b68103593fc1f581ae4b1f21b08bd551ed91290994b1207bf304bb11fcd0d68ee725706cafe19796c9afd8be74d80003d8772ad8243cc09f77e972834f8f1c24a4b34fa75e5deb6823747f80a15b5d37d150afbfb767b19a1c8eddb45a65cb84b4ef03f9eca0", 0xcb}], 0x4}, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f0000000100)={'caif0\x00', 0x8, 0x81}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000003c0)={0xffffffffffffffff}) r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f0000000200)=0x200, 0x2) getsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$SIOCX25CALLACCPTAPPRV(r2, 0x89e8) 03:21:07 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {0x4}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) [ 973.471574][ T9735] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 973.538538][ T9735] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 973.567666][ T9735] netlink: 'syz-executor.1': attribute type 27 has an invalid length. 03:21:07 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {0x14}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:21:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f0000000140)=0x8000, 0x4) sendfile(r3, r0, &(0x7f0000000240)=0x3ff, 0x9) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={&(0x7f0000000080)='./file0\x00', 0x0, 0x18}, 0x10) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010005f70000e28c5339464e42402b5b43cf9d7467b30b7ee982eab323870a052d610f42d81b7579d2fb5e0000e6ff7ef6878de822e709b23b13cb2d7dffff0000000000da448529864fb65ba4e45bca59751e5b1415238c3b9a062bf1dd1cd12b82f256668bbf8e50bce17a137ae026e12160a9a8f3c9fbc977521352c6709a65d9fc090146945e23e0e03dec41119e5983fc8700536616d273c10e4ea826b391cb7ae01a03b81018e06a3289acf5ef96be06ca7f62310abf4cf200"/245], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7f}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0) 03:21:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000280012003a98195df4d1460e0ca41602001400017b5f000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x5}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000080001007166710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a010c3"], 0x74}}, 0x0) r3 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x49249249249269c, 0x0) 03:21:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0xeb00, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) 03:21:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="500100002400070500000100f500000000000000", @ANYRES32, @ANYBLOB="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"], 0x150}}, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r2, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3b}}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x2400c004}, 0x40) sendmmsg(r0, &(0x7f0000000180), 0x4000000000002bc, 0x0) [ 973.858106][ T9769] device bond6 entered promiscuous mode 03:21:07 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB='H\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000b37200000b000100666c6f776572000018001600140054800c00f9800800010000000180"], 0x48}}, 0x0) socketpair(0x2b, 0x800, 0x2, &(0x7f0000000600)) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000000700)={@l2={0x1f, 0x2, @fixed={[], 0x12}, 0x6}, {&(0x7f00000002c0)=""/90, 0x5a}, &(0x7f00000006c0), 0x2e}, 0xa0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 973.902859][ T9811] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.5'. [ 973.980810][ T9788] bond6: (slave bridge6): making interface the new active one [ 974.029373][ T9788] device bridge6 entered promiscuous mode [ 974.050490][ T9788] bond6: (slave bridge6): Enslaving as an active interface with an up link [ 974.105655][ T9788] bond7 (uninitialized): Released all slaves [ 974.312086][ T9716] IPVS: ftp: loaded support on port[0] = 21 03:21:08 executing program 2: setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002600)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)={0x20, r3, 0x8e6767b8eef245b5, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="090db5055e0bcfe847a071") 03:21:08 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {0x58}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:21:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = accept4$unix(r1, 0x0, &(0x7f0000000240), 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000300), 0x4) getsockopt(r5, 0x3f, 0x8001, &(0x7f0000000500)=""/4096, &(0x7f00000002c0)=0x1000) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r6, @ANYBLOB="000000000000000008000a000f000000fad9f8c015c475c8080866213586066288d16c3a5dc2b2b2a7f54d8d984831cfec3d25f3437f94652a9431a5b19a6796a594a302e7875b3f14f42d02dfe65cf7c94e3b13cbada0e4aaa38c3fab445ce07ab06f374e56d474d14f48ca5764ad7b3ef5277520a8234da76c5bf47e707be23a04f0b3330513182bef6f497ab565e27e58127384c600000000000000bd5924932ebd158edaf639c838a0cd104b2610596bb71ee65a021da793f1fb22dff2dd034a236d441eaef1b02ee00bc9eb5bc51ec30bb91ca55faec9ffaaf9e978b60099532f323f9bfe1c0f44e18c95e83b5dad3b0ee0059f4b5ba65a3513fb9159800015cbe195dbd262f5345a4cda00"/286], 0x28}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x23, 0x80000, 0x808) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800"/20, @ANYRES32=r9, @ANYBLOB="000074bc7cb1000008000a0000000000"], 0x28}}, 0x0) 03:21:08 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x5, 0x1, 0x5}, 0x14}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newae={0x54, 0x1e, 0x521, 0x0, 0x0, {{@in=@broadcast}, @in=@local}, [@etimer_thresh={0x8}, @mark={0xc}]}, 0x54}, 0x8}, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) setsockopt$inet6_dccp_buf(r2, 0x21, 0xf, &(0x7f0000000000)="9191e6f839aaedd24cc2a353bb4b6a9ccd25a5f57ec2d9375db4752ec0bf128130cc3439bd3f4448ffd3159f0789e531efcc3479e7522a41252cf68f2c39001fb05a64", 0x43) 03:21:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0xec00, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) 03:21:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1c, 0x50f, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x2, 0xffffff8e}, [@NDA_LLADDR={0xa, 0x2, @random="0004000200"}]}, 0x28}}, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r4, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r4, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r4}) r6 = socket(0xa, 0x2, 0x0) r7 = socket(0xa, 0x1, 0x0) close(r7) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000680)={r9}, &(0x7f00000006c0)=0xc) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000080)={r9, 0x81, 0x10, 0x2}, &(0x7f0000000180)=0x18) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000280)={r9, @in6={{0xa, 0x4e24, 0xe0b, @loopback}}, 0x9b92, 0xff, 0x6, 0x7f, 0x22, 0x20, 0xf9}, &(0x7f00000000c0)=0x9c) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000140)={r10, 0x101}, 0x8) setsockopt$netrom_NETROM_IDLE(r5, 0x103, 0x7, &(0x7f0000000240)=0x4, 0x4) [ 974.980484][ T6991] tipc: TX() has been purged, node left! 03:21:08 executing program 1: setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x21, 0x23}, @mss, @sack_perm], 0x3) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000040)={0x0, 0xb411, 0x4ef}, 0x8) sendto$inet6(r0, &(0x7f0000000000)='E', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) [ 975.218897][ T26] audit: type=1804 audit(1586748068.879:722): pid=9907 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922123606/syzkaller.TgTSaq/713/cgroup.controllers" dev="sda1" ino=16377 res=1 [ 975.222322][ T9864] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT 03:21:08 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) [ 975.312191][ T9867] 8021q: adding VLAN 0 to HW filter on device bond7 [ 975.351476][ T9867] device bond7 entered promiscuous mode 03:21:09 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000000), 0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmmsg$sock(r0, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="efce2900f1c354aa1bbb3fc566ea7ef8d79717107b466374cd8a5297d1062231bb2aaf70f1f4f307e176271a74084a5ce0856fcf2341ba41da07aec05a4f25889f88c9233339387d448ecea682ad418ba554e7e726679f15cbbce114c18280080a1f6059b362cf7bd488f3df07ee7325028d306f671e361f09f4e9b8b9beacc0ae31ba93e176eca9f8634529caa69b7eb88a83935cc1ddb1f3829011804ddc85b6555f2072afb9be87df72d7e3f496a75fb1d345c376bbcba2f52af28780d1c1c9e457979d687fde83e3295f44970399ab2d75affcad63f5fb4c100d6e50abb65463c0d6bea18c3337", 0xe9}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)="47854fd337b3312bddd0934a2cc184b2fc589b44b87a84b3d06b32d916248e41cdeee67e608e7347", 0x28}, {&(0x7f0000000240)="ecf4a51d66cd79cbbbe795e50a373f1ce3e708127da49aa727dc861d0e28ac8095ae40e1f20c707ff958acfafc94be168186af41637dc3459ba473aa6c05ddd514fc0119e8e3604f460a3443a1d146edc73103ca83172d6a57c065db1fee", 0x5e}], 0x2, &(0x7f0000000300)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0xffffffff}}], 0x30}}], 0x2, 0x4001) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) accept4(r2, 0x0, 0x0, 0x0) [ 975.379617][ T9867] bond0: (slave bond7): Enslaving as an active interface with an up link 03:21:09 executing program 1: sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000000119050000000000000000000000003c0001002c0001001400030016f8bcd383af9b1577def13edad6b8bf14000400fe8020000000000000000000000000bb0c00020005000100000000003c0002000c00020005000100000000002c0001001400000000001f00000000000000080114000400ff00000c00000000000000000000000108000700000000002400180014000300080001007f001001080002007f0000010c00020005000100feff0000"], 0xb8}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8, 0x6800, 0x0, 0x2000c800}, 0x4080) 03:21:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0xed00, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) 03:21:09 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {0x0, 0x2}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:21:09 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x20, 0xfffffffc}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000380), 0x1040c) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) write$binfmt_elf64(r2, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0x1732) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bind$x25(r3, &(0x7f0000000040)={0x9, @null=' \x00'}, 0x12) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0xfe6f) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000001300)={0x0, r0, 0x0, 0x3}) 03:21:09 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)="fc0000001c00071bab0925000900070007ab08000c000000f0007e93210005c000000000000000000000000000039915fa2c1ec28670e9889bb94b46fe0000000a0002", 0x43) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0xfffffffffffffd81) close(r1) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) socket(0x10, 0x80002, 0x0) [ 975.612583][ T9928] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 975.671030][ T9928] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 03:21:09 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000600)={r2}) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @rand_addr, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r4, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r4, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) socket$pppoe(0x18, 0x1, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r5, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r5, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e20, @local}}, 0xa7, 0x1, 0x7, 0x1ff, 0x48, 0x4, 0x7b}, &(0x7f0000000040)=0x9c) getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0xa, 0x31, 0xffffffffffffffff, 0x0) [ 975.735759][ T9928] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 975.768394][ T9941] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 975.806517][ T9941] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 03:21:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x2, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) 03:21:09 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {0x0, 0x3}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) [ 975.863597][ T9941] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 03:21:09 executing program 2: sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00eab10004003eb47c560b2ea817c658a137ab1a25595b695e27102a95cca44672be18e321d7b124ff60dc90bef1e3b0dba64b9b6a3cc23bda81eccb575f71a7e46d10e0d1fe2c13305a03881705f472f563"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="8c0000006400270d00"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000000000000b000100666c6f77657200005c000200080038ff00000000080016000d000000060024000000000006000800001b000006005e000900000014000200ff02000000000000000000000000000114000f00ffffffffff00000000000100ddeba26d08002f0068030000c27c3f8d10addefacef3ea2b69fa90e61722acd02f26cbb6f03c244e6633f3f4e965f2a87496a6d6e5eb68241ebef277ae20f3656b7acd73e14832b6c4a7af0ad90196cb349dd7eb00547954f63058b0483cbb69be54c9d2d33b76f4eb1665053e163929cd0b7c09291542a0ccd6b4a6386ca160eaaa9410240651bdad0ce3f8d31f7c11b0df8f864586e6a991f46b9da9ca80f5d824bf8f526490296055e9440c421a3f63c6edbf41b17348eb6e5126d243bda76bcc00"/310], 0x8c}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 03:21:09 executing program 1: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) r3 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r3, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r3, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) r4 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r4, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r4, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) r5 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r5, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r1, @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRES16=r2, @ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYRESDEC=r3, @ANYBLOB="fc8bf90d93ff65572b993f8197a1e9c9aa22ddec7ea7007354a6c112a0a2ba26fd6be8584808274f200fe035b282af50a661d46a8b13aed5788f2e77a6652362434878df0f3ca90164c90f02028f95187f94264e4fb32b20d4d4682b5d91da8b08e8cb82705e56692178e06d12f224e2d0a5de8a75c925e424677ccb5b890c30e40a6b143b19ba355902dfa63bf9cb6f2d52ede145d856b2e80571c35b6fc707ec04e3c01d0b40a7248d7b9d9af41c40233ccbf4de3addd54cd659f4796f906754d3f126", @ANYRESDEC=r4, @ANYRESOCT=r5, @ANYRESDEC, @ANYBLOB="082f839823e43d631457d8552a0c702c1fe3b1e3ec0ab393a08c6c7058e097dc380818e40d83cf72878e04679baf387d103a971c3233179a085a3584e23d870a45dda4d64170470ee3cd8023d972e8c6ecfff5a740c590e9755f702480c0135b1ec7df548b86c5ddfb1b17074d9d8fb0a0d9d44d6873041fb3e5244be38878855cf528643e24", @ANYRESHEX, @ANYRES64]], @ANYRES16=r1], 0x3}}, 0xd1) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 03:21:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x3, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) 03:21:09 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {0x0, 0x4}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:21:09 executing program 1: r0 = socket(0x11, 0x3, 0x0) ioctl$SIOCSIFMTU(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00'}) r1 = socket(0x2b, 0x2, 0x1) ioctl$SIOCSIFMTU(r1, 0x8914, &(0x7f0000000000)={'hsr0\x00', 0x5dd}) 03:21:09 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'bridge0\x00', 0x2}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x100}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, [0x9, 0xaaf, 0x9, 0x1f, 0x4, 0xffff, 0x1, 0x7, 0xfffffffffffff85f, 0x1, 0x1, 0x4, 0xffffffff, 0x8, 0x2]}, &(0x7f0000000040)=0x100) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000100)={r4, 0x7, 0x3, 0xffffff00}, &(0x7f0000000340)=0x10) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000000000450000240000000000219078000003fdac141432000000000401907804ff7f0700e600003750f6b25e554dc6cfd1b4d6c9f8b2154dca40ecbf6d23021b4167530b2453a69263dc44c9d0c0656d3d2a007e4f2eef114bdfc3627f53467dac911b8e67b6c53bf7577bdb3b47dd5c775ba8c47fc804ca31e4df730265115c78420485784c242d2cb8fedfd5fff2c8fe7d8c49bc941db6296cefa7269c594c0e452b1f7d5a9a137b6b"], 0x2e) 03:21:10 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {0x0, 0x14}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:21:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6e6b090000a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863829b9ace6afe217b151889f478b7a2603d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac64832"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x121, 0x0, 0x0, {0x2, 0x1, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_FLAGS={0x8, 0x8, 0x200}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x6558, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) accept4$tipc(r5, &(0x7f0000000240), &(0x7f00000003c0)=0x10, 0x0) 03:21:10 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x5, 0x1, 0x2, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd06, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f0000000080)) 03:21:10 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {0x0, 0x58}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:21:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x5, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) 03:21:10 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x200000000000021) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000040)={0x2f0, 0x0, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@CTA_EXPECT_MASTER={0xa8, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @rand_addr=0x3}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @dev={0xfe, 0x80, [], 0x2e}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @ipv4={[], [], @local}}}}]}, @CTA_EXPECT_NAT={0xa0, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_NAT_TUPLE={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x36}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1}, @CTA_EXPECT_TUPLE={0xb4, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x44}}, {0x8, 0x2, @rand_addr=0x291efa18}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @dev={0xfe, 0x80, [], 0x40}}}}]}, @CTA_EXPECT_MASK={0xc, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x36}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xe}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_MASK={0x84, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1400}]}, 0x2f0}, 0x1, 0x0, 0x0, 0x40}, 0x48800) accept4(r0, 0x0, 0x0, 0x0) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) [ 976.843852][T10006] IPVS: ftp: loaded support on port[0] = 21 03:21:10 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x5, 0x1, 0x2, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd06, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f0000000080)) 03:21:11 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000000)=0x8, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e2c, 0x0, @ipv4={[], [], @local}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) sendfile(r3, r0, 0x0, 0x8000000000004) 03:21:11 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:21:11 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) recvmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/205, 0xcd}, {&(0x7f0000000100)=""/52, 0x34}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x4, &(0x7f0000001300)=""/195, 0xc3}, 0x120) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000002600)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r2, @ANYBLOB="eba700000000000000000a00000008000300", @ANYRES32], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x2c, r2, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xb4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4040081) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) recvfrom$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") write(r3, &(0x7f0000000000)="240000001a005f3814f9f4070009040180000000000000000000000008001e0040000000", 0x24) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x2b, 0xfffffffffffffe7f, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001fffffff00004000632f77fbac141412e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x0, 0xfffffffffffffe09}, 0x28) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001540)={&(0x7f0000001500)='./file0\x00', r5}, 0x10) 03:21:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0xa, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) 03:21:11 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) [ 977.708075][T10069] __nla_validate_parse: 4 callbacks suppressed [ 977.708087][T10069] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 977.744328][T10067] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 03:21:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @random="4ea35c9f13fc", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x2, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x4c, &(0x7f0000000180)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "20af00", 0x16, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {'>\x00'}}}}}}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') [ 977.765105][T10008] validate_nla: 23 callbacks suppressed [ 977.765113][T10008] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 977.797889][T10067] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.3'. [ 977.888718][T10006] IPVS: ftp: loaded support on port[0] = 21 [ 977.921587][T10013] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 979.693611][ T6991] tipc: TX() has been purged, node left! 03:21:14 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0xac14140d}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1, &(0x7f00000001c0)="080db5055e0bcfe847a071") recvfrom(r0, &(0x7f0000000100)=""/94, 0xffffffffffffff5e, 0x10100, 0x0, 0x0) 03:21:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x4, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) 03:21:14 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:21:14 executing program 1: r0 = socket$inet(0x2b, 0x80000, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="740000000f06010800000000004000000200000206000b000000000006000b0002000000050001000700000006000b0001000000"], 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x24048000) write(r1, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) sendto$inet(r0, &(0x7f0000000040)="d813d5788b", 0x5, 0x1, &(0x7f00000000c0)={0x2, 0x4e24, @local}, 0x10) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none, 0x400, 0x2}, 0xe) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000200), &(0x7f0000000240)=0xc) listen(r0, 0x0) 03:21:14 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf) ioctl$SIOCAX25DELUID(r0, 0x89e8, 0x0) 03:21:14 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.effective_mems\x00', 0x275a, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000100)={&(0x7f0000000040)="09703152f63623e890cd080da49b12bc8fec5c6ec689482b38814f8ab35f18928672178d41c14f5f40cc2f6eed15101340cc5ec4f99c199ca9c979b66905d10f44214bdd699d52c331ce1fae", &(0x7f00000000c0)=""/2, &(0x7f00000001c0)="a8553690c053915528e0a0268415268f02fd941dc2de727bb92bda158fca6ce93a343406c5fad1d6b95701b96e987e", &(0x7f0000000300)="5311b9fb183e147f0b487f1e871c5292aeeaf4e70992136a43ab18a7ce5711fe5a0fcc9fd3a4e2b98a312791a2877979fb7546772d9c2570528a392ddcb4594298f06c52c6adff7686bd42263758b5b84ed48dfb9ef70949605e2eb98851d8425623e2eacb51a7076ba4d716e517398acf63bcfc052edfb0eb25ac68c0583d57b5a8c43d73a536c329d2917ef34a0023f19efe4634929545296ff32254eb3a687af5b5ca3b5dbb92e2d0041f3cc2606993b5282c7ab798ad7f7f1f990a009a9a4c288a4a9c0d8b8f9fff5f0279c67809007a56f9015f50b5016658a963582ef15f2b07", 0x5, 0xffffffffffffffff, 0x4}, 0x38) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000240)=0x93d1, 0x4) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000680)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000000)="14885eed546ff69928d88019da678265cb928c68bd832286b357666a2952d944db180c081c894742f06f015d761e417a3fe9e66a1d", 0xfffffffffffffd82, 0x8a0, 0x0, 0xffffffffffffffbf) r3 = socket$rxrpc(0x21, 0x2, 0x2) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$inet6(r4, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000004c0)=0x1c, 0x40800) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)={&(0x7f0000000280)='./file0\x00', r0}, 0x10) bind$rxrpc(r3, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r3, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) r5 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r5, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r5, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) sendfile(r3, r5, &(0x7f0000000200)=0x75d2, 0x2) [ 980.894174][T10126] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 980.916133][T10126] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 980.964675][T10136] netlink: 'syz-executor.1': attribute type 27 has an invalid length. 03:21:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x705, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x148}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}, @IFLA_IPTUN_FWMARK={0x8}]}}}, @IFLA_MASTER={0x8}]}, 0x54}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000080)=0x7, 0x4) 03:21:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x6, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) [ 981.024543][T10141] netlink: 'syz-executor.1': attribute type 27 has an invalid length. 03:21:14 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:21:14 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f00000005c0)={0x1, 0x1, 0x1000, 0xb3, &(0x7f0000000400)="310b41fd146d2aaf7fb5af6f3cc134145e5877fbbebca3b2803fe4b6c97a20464fb9bb979acc22bcb819cc0896727f117456b2a8f84b294fa5c9adef474a9313e801d16759342adac1f75a889765502a06576a8311d55d78630455c2258cb5de449f6797d0ef70ab07ea8eb32bedb4e34437c0aeb5bcb3aaf41bdc26e003c0188f4711e1e76a09ec9232d43625c98a503c6dafae03b67830655bb4f0e2cdb7cfe0cb24165cdffa6cccb5a731a95f527b13b036", 0xfd, 0x0, &(0x7f00000004c0)="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"}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r4, &(0x7f00000010c0)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x24) bind$rxrpc(r4, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000140)) ioctl(r3, 0x1000008912, &(0x7f0000000640)="049f0b71cb81eed300ec6fcad7ad1d608a085ae1de730000e66704b77e460be9d6ba2050044d24b3ea1fcc1dea3c9de97918b03b1bd95db7751992a550a20e7fed3bcca210dbb8cc0a26ff8fbe4116fd1c4f696b70f14e4a1c70c5c9c059a57c9640f99e7b8c5edb1343b12ff853e58bb1fa52e5719066eb26e31558016293057330f282d683b6121711c3f084608c1c07df8a381cc83defd71670ab034f143a387f6dd9129f1fda4a00000000000000000000001de884cb92e2b676c95fff75274c54cc") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r6, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r6, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r6, 0xc0406619, &(0x7f0000000100)={{0x1, 0x0, @descriptor="7146499d75e22352"}}) preadv(r5, &(0x7f0000000180)=[{&(0x7f0000001340)=""/4101, 0x1005}, {&(0x7f0000000200)=""/211, 0xd3}, {&(0x7f0000000300)=""/231, 0xe7}], 0x3, 0x0) 03:21:14 executing program 1: pipe(&(0x7f0000000340)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x1412, 0x800, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x6}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x20000800) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000031c0)={0x0, 0x0, &(0x7f0000003180)={&(0x7f0000000000)={0xfffffffffffffe3e, 0x1403, 0x300, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x8000) r3 = socket$netlink(0x10, 0x3, 0xe) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)={0x24, r5, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x24}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r5, 0x300, 0x70bd28, 0x5, {}, [@L2TP_ATTR_OFFSET={0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x3603}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x1) [ 981.273077][T10149] device ipip0 entered promiscuous mode 03:21:15 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {0x0, 0x0, 0x14}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:21:15 executing program 5: unshare(0x40000000) ioctl$sock_rose_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x0, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)}, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x2, 0xd, 0x2d, 0xd, 0xb, 0x0, 0x70bd25, 0x25dfdbff, [@sadb_ident={0x2, 0xb, 0x1800, 0x0, 0xffffffff}, @sadb_x_filter={0x5, 0x1a, @in6=@ipv4={[], [], @loopback}, @in6=@mcast1, 0x22, 0x4, 0x4}, @sadb_spirange={0x2, 0x10, 0x4d3, 0x4d3}]}, 0x58}}, 0x4c025) r1 = socket$inet(0x10, 0x3, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @random="96c1e9574b31", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x0, 0x0, 0x8, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000040)={'ip6tnl0\x00', @ifru_flags}) 03:21:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x700, &(0x7f0000000240)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7d}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) r3 = socket(0x10, 0x803, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={0xffffffffffffffff, 0xc0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r5 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r5, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r5, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) ioctl$FS_IOC_SETVERSION(r5, 0x40087602, &(0x7f0000000200)=0x6) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='rdma.current\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x65c15bf2) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r6, 0x660c) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x1c, 0x9, &(0x7f0000000300)=@raw=[@alu={0x7, 0x1, 0x3, 0x8, 0x6, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @call={0x85, 0x0, 0x0, 0x30}, @call={0x85, 0x0, 0x0, 0x1f}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x52}, @map_val={0x18, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6}, @jmp={0x5, 0x1, 0x8, 0x0, 0x0, 0x30, 0x1}], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000380)=""/4096, 0x41100, 0xc, [], r2, 0x18, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0x7, 0x2000000, 0x3}, 0x10, r4, r6}, 0x78) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='rdma.current\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000040)=ANY=[], 0x65c15bf2) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={0xffffffffffffffff, r7, 0x3, 0x4, r8}, 0x14) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) [ 981.441952][ T26] audit: type=1804 audit(1586748075.099:723): pid=10163 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir055243180/syzkaller.BBU39k/748/cgroup.controllers" dev="sda1" ino=16280 res=1 03:21:15 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @rand_addr="c463c0af8adcdb16d1302400001237d8"}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="d2", 0x1}], 0x1, &(0x7f0000000200)=[@dstaddrv6={0x20, 0x84, 0x8, @mcast1}], 0x20}, 0x0) r1 = socket(0xa, 0x2, 0x0) r2 = socket(0xa, 0x1, 0x0) close(r2) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000680)={r4}, &(0x7f00000006c0)=0xc) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000080)={r4, 0x81, 0x10, 0x2}, &(0x7f0000000180)=0x18) r5 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0x1}, 0x4) r6 = socket(0xa, 0x1, 0x0) close(r6) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000680)={r8}, &(0x7f00000006c0)=0xc) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000080)={r8, 0x81, 0x10, 0x2}, &(0x7f0000000180)=0x18) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f00000001c0)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, 0xfffffd52, &(0x7f00000003c0)=[{&(0x7f0000000700)="e0f63391d98f53627581e4fa1521e6c6ab7da0b8e53fac0e16ee0916d222b463478280bfcc5878c087353a0087d2fcbed279ebcfde28e8b44357d42829abac1becd96a01d4d28bc2592c08b9fe65966c348724fbf3a08534aefd6d6e14963250371aa7bd8388c2dbcb1ca22592460e88c52051635929b44187cc5ccbaec27199d26a5b3d5668bc5455b0f072d1251b17674e86fb9cb6728fbbe50d70db2522dcfdcb4af06e622a523c1276442d251432b17cc48df117a7c5922676df35034b515c91572e90e87f86c6d38f6c6b08e3b38e6451d5942b2fba498883f7e72c2f4dbbd1603e3b06e47c4dc17bf739a693ba00ec8cd80a85037c2d69b5ebadbde13dd071a9fd18da4b5359198fba92bd28fcc5dc8d9786eaf41d76bd3bf64147963575f2eb0445432b779711891b0b389fb35c7cd3e894ce41c87c4ed1c97b0b6bf411fc811928fa271e8e40684adaddd6ce53fdc3f0b8a96dca75141e6028da6012e1b1591132d9177c08f9005c1c9ab4b7d454b05f7a6195a286e12661faaad366711654f4206126175cccb4275f3cf48a9bf467062803406f7e3f88cb9892eab37a7dce84d35b6507aa29eb8870adf6f5d89fc091e6d271a4bae9f45371113c2a6d2efb2712eb27e070992b6410834aa9eba29720e023402f4b44723e29079104b487656b4c14580472e961acd472fd7548ba2840652b87c435045d97c3fce580fd577e647996109387109791c7a4a59c3b82e3356743133d26ece52f8bf35ff73c9ce7dc77d59e1adad08a4f68e12842a508b9d9c60d2c0b95df25de9eb6b1923d137ccf669190733c7431eb7440057e3ee59f9203490b87ccdc58359d25a9b6c4868f9c7f0b0ce24c5a0e34820fa10c9082693f51dfe82e6a1110d37fd0fefc3a54137db7f2221dd8c0e2ad34f768a5e05ce6321c09166a6f30f5ded30b57e16305f53bd8b4c69a9b86f887312ffe1e3a9f78c124588f14051797ff1ea2fe2d0f7f5d4419a8ae3cc05c0f879a7f9a024abf925451c72caeaccd65da27811c1c1447e0ed889c7795e03cb64463441ff9523a820222bea413ea7f5a3dd2f64efa4192ab96a28f7ec3d6ac488abdd82f97fdc2e56f7c205ca2bafdf0cc9413f6012d92b1731ee7c9da11b65850386fa7ed5b8e727b08a790e7a35dc7717b972fe4130647f5dfaa8a7acd11d65f843270b17ec9eb86556a0dbddcf260dfa9567dd5efe7e2b86c4f9d65a15c96eaf2c5216e93521e16877429839f88504f7c184416fe7c86ae827c568040f42d1b0b1e845a790e3ca74bf9ba9e6ba98a5eb99feb79a161760e2d4328a4abd87bcfbba9daabde26f5ade5457e3baeb9e721619241e0cf94b0aa9b3cd4970e0673b39ad35ad281bfdfd7a6af4a341ee7be09316de50b189eb3b3b677df887b61f5c4171b0cb8117b4d09f0c90cf5d568074fd64df7997621be565d88c64e3dd507cbeac8eb269a02249169133338adcaffb99cf9029dc6f8e9f85aa401cd3ce5620050debce1a4c5b292965e17151e83f48157ca745b74c1f9be9060ac02d1050a9be4790d779e3c47ad21666fbf7e2ba9995c6ab36e09fd2e651d65fd94ce748327834ef2b958d21d4afb7f8cc351868b22dd51bd5d0b7a2e95ec258f035429d7b931a45aea1fb8554dbcaf88ec5f66d2cbd1bdb1c16ef5dda339dc6cf7139d95fe9ebe1d295f41f37a5838cbf581030d18f465609e316ec375b9f227cb95bdee6931039ed16239d30189836a3fa91ed9f38499cf9426953c97c9c8cd23f50095f2009a13c568ffd1d0bccce14fb9703fc9d06ffc6fbd06b725bdb663a77ccdef397ed56c3239eee3e3afed9ccc65d4d5266de8f6fba6f7463d3a1750f495bc519a3837fb4d5c584d3ac08652ad9ba2c089826dfbd12985b23b2f0ef4f751d4c858c676c3c795f7c31c7d347496812c42dd9232744e0a4ad2ea3c9f2a456cc7b666728b02b030ee6cab867908b792be40173b7a4f204b09463b32c5599d79a9d7c392843e19eb7df6363d7c0d32611c9b535060886ef167ad35f7462956fe35c557fd426e2f8a5a7b320d469a49e9737c3e551b940d1142fa5fc9f59e6d5118ed00dd16d4f3f04f844beae375c753e60d6a8276199d4de9e8567ee003aa34d639e51108f448a3633d8890846739cc7f5e4e92ec14b426df0efe14e5718c273440fb72aa1adb96b3b49d6a3cf1126163ef51cbc0b63bc7e9997e208485aad2d98870f9c8ba78ba85ceeded854b6edb53c583071e4214ec0f0b03b2a00fce0f9066d8a48e250c4d768ea2043b04c96059249fa5be1039e8544d21a44482b16c89f72ca57d590e502fdc3cfe70d8d7106b80525f7428c8a81ae7c74f8746459df4bf91f6f85bf4e5fe9cdd9a49db78216e2b2f8d06dfb3dae53c8696ea7edf376cb77fcc5ed827aa3814ce9c6606a881a7cf21c1b0b1772db9c098980ada68bd6c9b008c48d5ede02e8df5df56b9eff4dd3bcb519b73df6d1fe5707179e7c9f12b9f3f0fdc603955a336a40506cd621006a20ba2c2ca623e80067665fd7c7ad6627efc0caf1673f61a596737dfdaf28f354c3561d2494c495a286e8f920887cf4fcd2054699118759aeb22018ac32ec9abcc0d09c85de10df71d98b6baa8406f7046c61d1ae4ab14bddfc8d093efc83f4f593747a1fde212049c4b5867e380974f92a27412f04928cb37fc0e4110e88541af65159b780005976d16534e646d946205b98a5bc28420f555a84ea135e1e75e7e41fef1c984799839cbeb8e412d4ceac6f1a551cd75aa9e02b9ba0b80000c7a494ab240ade3717d22506ec7ac726f380d41adc461e2669a644612a1c26d27fe84d67adc6821f6266abfbb39f43399cba0cd5090b45f5c635523ec7fab49e58c7ef09f984b52a003d92eeb2f5ccb98d65ea04d10f255bdb9b313bcff4665ee52a0d318a1bd27b6f079235cd54d2b0b7d352a4b35c6399bcda51351055a5b6dddba4f966e06df025df169020535f8050291dd16fd1100444b80ad1d1df375c0cebed9b231cf0b8a22bcf3ad411f17fd7f4acce2627c9495c7a207884a7944e486a15d622a4eb733c14a578093ece3c10db1a82dd0133385d4845a9b9fbd40c159e60dd8cc70ae942cf907485d7044724e3623cf23fe16fb073a3e06ef57a18671896cafb68bb6c9f8bfa6fe3cbced8903a7efc80c4ffe124db920c1469ebddeef8b6db6d68c09fc4d61b4cd58e65f61e68f7bcfd6d14e1f9303040996b116a1c4fa2ed430448f4598eaec0d6b5ee3b59d0c4b4e78bff68ab4d27595f2d7de7268f71f51fe871f0e7d524c1e976804d289532d1bed8e9d5643e6587a16c54109464987c6bf143359813d178c38cf4b870d1cc92cf7a85c833901f76fd06746ffa80d33a0e0604f814bc1e5ab9997cad73ecacb88c8a5c525e48af4d38834af4c49b5ab9f2baec5efbe35319990d24994b2a7f6c7f443c3521ee34be244c2b58f8d1bbb718ab2212ba36d3b1543e02cb008200328bc78846c74f5c99a3825af93cc857dc4cd06111b975393a5ea70eff11913fd7ea000b38201f4cee80e25412f3868bc8b400c55957f640d6f25b33220e4a915c9785badff52f5af56033acebddf278d6d985b4ae6595eef924ac3fe0067b6a080a2a5ef2d4752a4f78e6b6b5dffe8bf8cfc5b3174ad05403c4265461680a9a5e4b2e0edba73c464eee00490025760cd0a840f85c4c002a1926e495f0ca91499187a1f7097aea42a963881b5d806fdbc61784948605c67ed26cc9b001c5d485b4393351e09345e7ee4f1fe851d7812e36d46f05bb59e08e6ca21b33f2d827400e065654a9395d18637f4ec40264f013d65ced446204487e650183cc8b8206b31b9828af66cab518a5809b9a0fa6fe1d235f7c703a72868a20aba50222ede9968e041619cd8bd9fdbde1f2e557593777628cc573375cc597561d4f1e64fe0e0968d9f7492291adaffad2c65758c06f281e23927efdaf8593e0dc647ad1cf402f7b16bae5652219865dfeaec4a6f89d465570b596ee7edee50e1b47bf46e05eeb0cbdbfa6e7e2dcec687dbff4436a1ee607b70bbdd3b1b2792bdd440667691d22fa3dbd22e18c8c40b384384ea2407d8e8c95c096509829bb296f51c3753e5514c35216ed4fd32d2fce0feaa0e68147d9959cbb3449c5b817c154df6d10f70a62dd1fce4469e9bf782fd8f62bd8576093ac0f599beccd1ac5ebf063f734d43192e350d2a577f223bf7b6b85e3b70c5530c1119d20b422e90fc23f0d390dec53b6a9bdabcece8311c3c2a3e6a9c6ce38a38938e07505b0def396cb069c3071c893e6a6c8faa5258183bb9248a81736a9c51203fc09f359655ef438d58167dac0a1a3e5abe9364cfc1f4773375db79a271c7c4b87cc9eea5b43e4f50d9dd648287520657bedb6fdbbbd65f06f5aa2dd7c179f1d83090ede23b3eec3a0e2029e0b6b7d9d61eba2f31cb7d95f7a3fe459e1f3fc8fe26b98877b85756fc418552daa7588a6e4b37ac5b269340016079363ba4de489152e28203730f3e4645c08e12b9614b3ab96db760c06f5d1addf828703eb0b2e081a807a13d89f146ef6f66991021b5df65316d71fc439641bc18794bff7ba67e568ab4e71062c452b87a99b820979f4638db40a0ac75ee2276f008f0a9a8b08c35728bf018e65dde7d981ee1e46b9df8d99ae52c94262d58f18f12095aef0d3eb2afeeda3f6953f6ec42a1df9b55d4ab362d4a8621aef8fc2d53865e7f3f11065e66bbcd72ccafc756a3b9120b5208265455878d81935d7ea54f70dbf9b01e5e8b33a8c8511dab51ed458b0d6d4f18656a5aabc8e2e86a52b09a261b6298f100c6f8b38870d843dda4bff24895d1ab765578da20dc97424247b00e2640ff63e4dd32249bac0847bbf6cf7f24eb70ba42ffd11051cafaeb3e8a7c627c7234d20718f488dff27d449d80548afb9fe18c840f9a71ccad76cc753113773f82d97dbe446fb308239238b2780ffdcb97349c155354bd87e3f0606e60218e16517a62528bd437c21dc1c2e4f38561af1e7aa594d2d40e83721576c09b030f281ca46036b7a56b928b542d6ccc3ed32c388ffd379632d12ad2f622b2325c07f4ebad6fa6b7785bdb82449ecc8c0c18c1c81b19cef24697d8099d0b1964c387444b9ee00f77b06376c6ed43c641ad6cfa1a631cae08de8cc1040b4135d261b0275f8e8ed905a0f100b72576c3692d473036a1f3af932bc8757de70bb8b81e62641059892740441d8f5e2be81b20ab339578465622bf4d0edf710c0f3d6623a7419edc48ead3edb44c8fb635f95eb45c18334c0bf0c24726545c8874e79cc6f2aa3a67e0b23e9811292303720efa83ed1f980d47c9f5f1cbda9c6393992cae4aa1a9e0c5eff7d55730972236a62fee3348779db51bc04235f7327adca0dc1cf69f5fd05b263dda754c0c635c6530029c1f49d284c667241667d52195e985458ad2a7de0e53c24b19e18c9648db2ccb15288b8af4a782f8190751716615bd95fdc16a78a74f417e36b0bf677c88b282a46cafe897b9a95ddcf79cf445345654b6c6ea27a2cf5ef7b8cc2b58012e7773404b7c333ac506502712afb022a317ef8bc77048a751154ff83a412caf615c72316db61880de7cc7d19e22bcaa8d6b91862c4597a4e25668165ffd1d5dfc82f1311490b642b3457eb59734f909e59485d0bfb1254cd1e975d0972ca06519a78e0f887be5de362b18b8edc16646babf09aa2d1efcf125fb1a8c77e2e41f8a69abd336126423c5c10826212b8261c122916aa67c49a4cd1049"}, {&(0x7f0000000240)="76185cf467179581ec556bc1afa623c2d9d98d79a7421ff8c790c8351b2d39f90ed40df98211220744f361a77fd3fdd2ed05a9fcbbe167a3eedd7f7cb9ba36c914555a9b1f441c3c0f0d7a244f01a9c63528188cc1abc1110f1f4e5f15ef684cc96111732a81ef56e75f390130218bc34d0a348b"}, {&(0x7f0000000140)="f9ecdaf13d612baa574e7dafb02fb154e389169a97ad2702d74c461324e4b77c0c9728f78edf3d988c6683"}, {&(0x7f00000002c0)="8ca1906246adc1e32a1a6a3f52305d331991a31f904754377f6dbcaabd7212dcb60660a4d4dffcb1ea4e7e38591e380af21fe1050d1f7a48a81719a9826665f39f2374741fb0720afafe84f12185ae10ec71135b4ef6b27554b5d7607cc0757faa9ef2883a6615379d7fb0e95eb422e71151fd629f9303d2d8ca2635e8d41066c6db2c409186ba00f5c99c8da800bb4423bb02cd33eb36ffaf6a20099334972f03580459099dc2b1b0edb1a5b4327691bea4ed98364b549a9c0e0d229b581b29e0f49395d68772757dc589e1b3e657fefc28cd643b2185"}, {&(0x7f0000001700)="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"}], 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x3, 0x8045, 0x0, 0xffffd92b, r8}}], 0x20}], 0x1, 0x0) 03:21:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0xe, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) [ 981.569333][ T26] audit: type=1804 audit(1586748075.139:724): pid=10151 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir055243180/syzkaller.BBU39k/748/memory.events" dev="sda1" ino=16271 res=1 03:21:15 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f00000000c0)={r2}) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @none}, 0xe) connect(r0, &(0x7f0000000000)=@rc={0x1f, @any, 0x5}, 0x80) [ 981.678122][T10174] IPVS: ftp: loaded support on port[0] = 21 03:21:15 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @rand_addr="c463c0af8adcdb16d1302400001237d8"}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="d2", 0x1}], 0x1, &(0x7f0000000200)=[@dstaddrv6={0x20, 0x84, 0x8, @mcast1}], 0x20}, 0x0) r1 = socket(0xa, 0x2, 0x0) r2 = socket(0xa, 0x1, 0x0) close(r2) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000680)={r4}, &(0x7f00000006c0)=0xc) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000080)={r4, 0x81, 0x10, 0x2}, &(0x7f0000000180)=0x18) r5 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000440)={0x1}, 0x4) r6 = socket(0xa, 0x1, 0x0) close(r6) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000680)={r8}, &(0x7f00000006c0)=0xc) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000080)={r8, 0x81, 0x10, 0x2}, &(0x7f0000000180)=0x18) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f00000001c0)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, 0xfffffd52, &(0x7f00000003c0)=[{&(0x7f0000000700)="e0f63391d98f53627581e4fa1521e6c6ab7da0b8e53fac0e16ee0916d222b463478280bfcc5878c087353a0087d2fcbed279ebcfde28e8b44357d42829abac1becd96a01d4d28bc2592c08b9fe65966c348724fbf3a08534aefd6d6e14963250371aa7bd8388c2dbcb1ca22592460e88c52051635929b44187cc5ccbaec27199d26a5b3d5668bc5455b0f072d1251b17674e86fb9cb6728fbbe50d70db2522dcfdcb4af06e622a523c1276442d251432b17cc48df117a7c5922676df35034b515c91572e90e87f86c6d38f6c6b08e3b38e6451d5942b2fba498883f7e72c2f4dbbd1603e3b06e47c4dc17bf739a693ba00ec8cd80a85037c2d69b5ebadbde13dd071a9fd18da4b5359198fba92bd28fcc5dc8d9786eaf41d76bd3bf64147963575f2eb0445432b779711891b0b389fb35c7cd3e894ce41c87c4ed1c97b0b6bf411fc811928fa271e8e40684adaddd6ce53fdc3f0b8a96dca75141e6028da6012e1b1591132d9177c08f9005c1c9ab4b7d454b05f7a6195a286e12661faaad366711654f4206126175cccb4275f3cf48a9bf467062803406f7e3f88cb9892eab37a7dce84d35b6507aa29eb8870adf6f5d89fc091e6d271a4bae9f45371113c2a6d2efb2712eb27e070992b6410834aa9eba29720e023402f4b44723e29079104b487656b4c14580472e961acd472fd7548ba2840652b87c435045d97c3fce580fd577e647996109387109791c7a4a59c3b82e3356743133d26ece52f8bf35ff73c9ce7dc77d59e1adad08a4f68e12842a508b9d9c60d2c0b95df25de9eb6b1923d137ccf669190733c7431eb7440057e3ee59f9203490b87ccdc58359d25a9b6c4868f9c7f0b0ce24c5a0e34820fa10c9082693f51dfe82e6a1110d37fd0fefc3a54137db7f2221dd8c0e2ad34f768a5e05ce6321c09166a6f30f5ded30b57e16305f53bd8b4c69a9b86f887312ffe1e3a9f78c124588f14051797ff1ea2fe2d0f7f5d4419a8ae3cc05c0f879a7f9a024abf925451c72caeaccd65da27811c1c1447e0ed889c7795e03cb64463441ff9523a820222bea413ea7f5a3dd2f64efa4192ab96a28f7ec3d6ac488abdd82f97fdc2e56f7c205ca2bafdf0cc9413f6012d92b1731ee7c9da11b65850386fa7ed5b8e727b08a790e7a35dc7717b972fe4130647f5dfaa8a7acd11d65f843270b17ec9eb86556a0dbddcf260dfa9567dd5efe7e2b86c4f9d65a15c96eaf2c5216e93521e16877429839f88504f7c184416fe7c86ae827c568040f42d1b0b1e845a790e3ca74bf9ba9e6ba98a5eb99feb79a161760e2d4328a4abd87bcfbba9daabde26f5ade5457e3baeb9e721619241e0cf94b0aa9b3cd4970e0673b39ad35ad281bfdfd7a6af4a341ee7be09316de50b189eb3b3b677df887b61f5c4171b0cb8117b4d09f0c90cf5d568074fd64df7997621be565d88c64e3dd507cbeac8eb269a02249169133338adcaffb99cf9029dc6f8e9f85aa401cd3ce5620050debce1a4c5b292965e17151e83f48157ca745b74c1f9be9060ac02d1050a9be4790d779e3c47ad21666fbf7e2ba9995c6ab36e09fd2e651d65fd94ce748327834ef2b958d21d4afb7f8cc351868b22dd51bd5d0b7a2e95ec258f035429d7b931a45aea1fb8554dbcaf88ec5f66d2cbd1bdb1c16ef5dda339dc6cf7139d95fe9ebe1d295f41f37a5838cbf581030d18f465609e316ec375b9f227cb95bdee6931039ed16239d30189836a3fa91ed9f38499cf9426953c97c9c8cd23f50095f2009a13c568ffd1d0bccce14fb9703fc9d06ffc6fbd06b725bdb663a77ccdef397ed56c3239eee3e3afed9ccc65d4d5266de8f6fba6f7463d3a1750f495bc519a3837fb4d5c584d3ac08652ad9ba2c089826dfbd12985b23b2f0ef4f751d4c858c676c3c795f7c31c7d347496812c42dd9232744e0a4ad2ea3c9f2a456cc7b666728b02b030ee6cab867908b792be40173b7a4f204b09463b32c5599d79a9d7c392843e19eb7df6363d7c0d32611c9b535060886ef167ad35f7462956fe35c557fd426e2f8a5a7b320d469a49e9737c3e551b940d1142fa5fc9f59e6d5118ed00dd16d4f3f04f844beae375c753e60d6a8276199d4de9e8567ee003aa34d639e51108f448a3633d8890846739cc7f5e4e92ec14b426df0efe14e5718c273440fb72aa1adb96b3b49d6a3cf1126163ef51cbc0b63bc7e9997e208485aad2d98870f9c8ba78ba85ceeded854b6edb53c583071e4214ec0f0b03b2a00fce0f9066d8a48e250c4d768ea2043b04c96059249fa5be1039e8544d21a44482b16c89f72ca57d590e502fdc3cfe70d8d7106b80525f7428c8a81ae7c74f8746459df4bf91f6f85bf4e5fe9cdd9a49db78216e2b2f8d06dfb3dae53c8696ea7edf376cb77fcc5ed827aa3814ce9c6606a881a7cf21c1b0b1772db9c098980ada68bd6c9b008c48d5ede02e8df5df56b9eff4dd3bcb519b73df6d1fe5707179e7c9f12b9f3f0fdc603955a336a40506cd621006a20ba2c2ca623e80067665fd7c7ad6627efc0caf1673f61a596737dfdaf28f354c3561d2494c495a286e8f920887cf4fcd2054699118759aeb22018ac32ec9abcc0d09c85de10df71d98b6baa8406f7046c61d1ae4ab14bddfc8d093efc83f4f593747a1fde212049c4b5867e380974f92a27412f04928cb37fc0e4110e88541af65159b780005976d16534e646d946205b98a5bc28420f555a84ea135e1e75e7e41fef1c984799839cbeb8e412d4ceac6f1a551cd75aa9e02b9ba0b80000c7a494ab240ade3717d22506ec7ac726f380d41adc461e2669a644612a1c26d27fe84d67adc6821f6266abfbb39f43399cba0cd5090b45f5c635523ec7fab49e58c7ef09f984b52a003d92eeb2f5ccb98d65ea04d10f255bdb9b313bcff4665ee52a0d318a1bd27b6f079235cd54d2b0b7d352a4b35c6399bcda51351055a5b6dddba4f966e06df025df169020535f8050291dd16fd1100444b80ad1d1df375c0cebed9b231cf0b8a22bcf3ad411f17fd7f4acce2627c9495c7a207884a7944e486a15d622a4eb733c14a578093ece3c10db1a82dd0133385d4845a9b9fbd40c159e60dd8cc70ae942cf907485d7044724e3623cf23fe16fb073a3e06ef57a18671896cafb68bb6c9f8bfa6fe3cbced8903a7efc80c4ffe124db920c1469ebddeef8b6db6d68c09fc4d61b4cd58e65f61e68f7bcfd6d14e1f9303040996b116a1c4fa2ed430448f4598eaec0d6b5ee3b59d0c4b4e78bff68ab4d27595f2d7de7268f71f51fe871f0e7d524c1e976804d289532d1bed8e9d5643e6587a16c54109464987c6bf143359813d178c38cf4b870d1cc92cf7a85c833901f76fd06746ffa80d33a0e0604f814bc1e5ab9997cad73ecacb88c8a5c525e48af4d38834af4c49b5ab9f2baec5efbe35319990d24994b2a7f6c7f443c3521ee34be244c2b58f8d1bbb718ab2212ba36d3b1543e02cb008200328bc78846c74f5c99a3825af93cc857dc4cd06111b975393a5ea70eff11913fd7ea000b38201f4cee80e25412f3868bc8b400c55957f640d6f25b33220e4a915c9785badff52f5af56033acebddf278d6d985b4ae6595eef924ac3fe0067b6a080a2a5ef2d4752a4f78e6b6b5dffe8bf8cfc5b3174ad05403c4265461680a9a5e4b2e0edba73c464eee00490025760cd0a840f85c4c002a1926e495f0ca91499187a1f7097aea42a963881b5d806fdbc61784948605c67ed26cc9b001c5d485b4393351e09345e7ee4f1fe851d7812e36d46f05bb59e08e6ca21b33f2d827400e065654a9395d18637f4ec40264f013d65ced446204487e650183cc8b8206b31b9828af66cab518a5809b9a0fa6fe1d235f7c703a72868a20aba50222ede9968e041619cd8bd9fdbde1f2e557593777628cc573375cc597561d4f1e64fe0e0968d9f7492291adaffad2c65758c06f281e23927efdaf8593e0dc647ad1cf402f7b16bae5652219865dfeaec4a6f89d465570b596ee7edee50e1b47bf46e05eeb0cbdbfa6e7e2dcec687dbff4436a1ee607b70bbdd3b1b2792bdd440667691d22fa3dbd22e18c8c40b384384ea2407d8e8c95c096509829bb296f51c3753e5514c35216ed4fd32d2fce0feaa0e68147d9959cbb3449c5b817c154df6d10f70a62dd1fce4469e9bf782fd8f62bd8576093ac0f599beccd1ac5ebf063f734d43192e350d2a577f223bf7b6b85e3b70c5530c1119d20b422e90fc23f0d390dec53b6a9bdabcece8311c3c2a3e6a9c6ce38a38938e07505b0def396cb069c3071c893e6a6c8faa5258183bb9248a81736a9c51203fc09f359655ef438d58167dac0a1a3e5abe9364cfc1f4773375db79a271c7c4b87cc9eea5b43e4f50d9dd648287520657bedb6fdbbbd65f06f5aa2dd7c179f1d83090ede23b3eec3a0e2029e0b6b7d9d61eba2f31cb7d95f7a3fe459e1f3fc8fe26b98877b85756fc418552daa7588a6e4b37ac5b269340016079363ba4de489152e28203730f3e4645c08e12b9614b3ab96db760c06f5d1addf828703eb0b2e081a807a13d89f146ef6f66991021b5df65316d71fc439641bc18794bff7ba67e568ab4e71062c452b87a99b820979f4638db40a0ac75ee2276f008f0a9a8b08c35728bf018e65dde7d981ee1e46b9df8d99ae52c94262d58f18f12095aef0d3eb2afeeda3f6953f6ec42a1df9b55d4ab362d4a8621aef8fc2d53865e7f3f11065e66bbcd72ccafc756a3b9120b5208265455878d81935d7ea54f70dbf9b01e5e8b33a8c8511dab51ed458b0d6d4f18656a5aabc8e2e86a52b09a261b6298f100c6f8b38870d843dda4bff24895d1ab765578da20dc97424247b00e2640ff63e4dd32249bac0847bbf6cf7f24eb70ba42ffd11051cafaeb3e8a7c627c7234d20718f488dff27d449d80548afb9fe18c840f9a71ccad76cc753113773f82d97dbe446fb308239238b2780ffdcb97349c155354bd87e3f0606e60218e16517a62528bd437c21dc1c2e4f38561af1e7aa594d2d40e83721576c09b030f281ca46036b7a56b928b542d6ccc3ed32c388ffd379632d12ad2f622b2325c07f4ebad6fa6b7785bdb82449ecc8c0c18c1c81b19cef24697d8099d0b1964c387444b9ee00f77b06376c6ed43c641ad6cfa1a631cae08de8cc1040b4135d261b0275f8e8ed905a0f100b72576c3692d473036a1f3af932bc8757de70bb8b81e62641059892740441d8f5e2be81b20ab339578465622bf4d0edf710c0f3d6623a7419edc48ead3edb44c8fb635f95eb45c18334c0bf0c24726545c8874e79cc6f2aa3a67e0b23e9811292303720efa83ed1f980d47c9f5f1cbda9c6393992cae4aa1a9e0c5eff7d55730972236a62fee3348779db51bc04235f7327adca0dc1cf69f5fd05b263dda754c0c635c6530029c1f49d284c667241667d52195e985458ad2a7de0e53c24b19e18c9648db2ccb15288b8af4a782f8190751716615bd95fdc16a78a74f417e36b0bf677c88b282a46cafe897b9a95ddcf79cf445345654b6c6ea27a2cf5ef7b8cc2b58012e7773404b7c333ac506502712afb022a317ef8bc77048a751154ff83a412caf615c72316db61880de7cc7d19e22bcaa8d6b91862c4597a4e25668165ffd1d5dfc82f1311490b642b3457eb59734f909e59485d0bfb1254cd1e975d0972ca06519a78e0f887be5de362b18b8edc16646babf09aa2d1efcf125fb1a8c77e2e41f8a69abd336126423c5c10826212b8261c122916aa67c49a4cd1049"}, {&(0x7f0000000240)="76185cf467179581ec556bc1afa623c2d9d98d79a7421ff8c790c8351b2d39f90ed40df98211220744f361a77fd3fdd2ed05a9fcbbe167a3eedd7f7cb9ba36c914555a9b1f441c3c0f0d7a244f01a9c63528188cc1abc1110f1f4e5f15ef684cc96111732a81ef56e75f390130218bc34d0a348b"}, {&(0x7f0000000140)="f9ecdaf13d612baa574e7dafb02fb154e389169a97ad2702d74c461324e4b77c0c9728f78edf3d988c6683"}, {&(0x7f00000002c0)="8ca1906246adc1e32a1a6a3f52305d331991a31f904754377f6dbcaabd7212dcb60660a4d4dffcb1ea4e7e38591e380af21fe1050d1f7a48a81719a9826665f39f2374741fb0720afafe84f12185ae10ec71135b4ef6b27554b5d7607cc0757faa9ef2883a6615379d7fb0e95eb422e71151fd629f9303d2d8ca2635e8d41066c6db2c409186ba00f5c99c8da800bb4423bb02cd33eb36ffaf6a20099334972f03580459099dc2b1b0edb1a5b4327691bea4ed98364b549a9c0e0d229b581b29e0f49395d68772757dc589e1b3e657fefc28cd643b2185"}, {&(0x7f0000001700)="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"}], 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x3, 0x8045, 0x0, 0xffffd92b, r8}}], 0x20}], 0x1, 0x0) [ 981.764580][ T26] audit: type=1800 audit(1586748075.139:725): pid=10151 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=16271 res=0 [ 981.872474][T10190] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 981.915863][T10198] netlink: 'syz-executor.3': attribute type 14 has an invalid length. 03:21:15 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {0x0, 0x0, 0x58}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:21:15 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0xf915ec8762bad1cd, 0x0, 0x0, {}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x6}}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8000) socket$inet6_sctp(0xa, 0x10000000005, 0x84) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000180)={r2}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f0000000040)) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x810, 0xffffffffffffffff, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) socket(0x11, 0x800000003, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xc9, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) [ 982.022618][T10191] netlink: 'syz-executor.3': attribute type 14 has an invalid length. 03:21:15 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0xffffffff}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r3 = socket(0xa, 0x1, 0x0) close(r3) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r3, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x200}}], 0x20}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x10, &(0x7f00000000c0)={r4}, 0x8) 03:21:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x14, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) 03:21:15 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {0x0, 0x0, 0xf0}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) [ 982.261768][T10226] IPVS: ftp: loaded support on port[0] = 21 [ 982.351503][T10233] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 982.402800][T10233] sctp: [Deprecated]: syz-executor.1 (pid 10233) Use of struct sctp_assoc_value in delayed_ack socket option. [ 982.402800][T10233] Use struct sctp_sack_info instead [ 982.668870][T10174] IPVS: ftp: loaded support on port[0] = 21 03:21:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x6a, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) [ 983.071257][T10297] IPVS: ftp: loaded support on port[0] = 21 [ 983.090462][T10300] validate_nla: 1 callbacks suppressed [ 983.090472][T10300] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 983.145286][T10301] sctp: [Deprecated]: syz-executor.1 (pid 10301) Use of struct sctp_assoc_value in delayed_ack socket option. [ 983.145286][T10301] Use struct sctp_sack_info instead [ 983.280573][T10174] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 03:21:17 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[]}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000019c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="5e848cca82d53536644c9b385431d187ad15ea68953bf8af448134058762adf04a9cf95f72f2c1e476b400"/52], 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB="0000000012000000000800000f000000e415c4d89cc619842ed1a75a509d566bc5c14e3e56c1968b3632ece720604ce5abfa614780ecb6c40633efe9a0af7b9da41b5a1600edca3da3648bc03581f16be95d8006df526c46402448998bbaca8974e6cef3d1413d7fe0a9265282ff5a17786bb4021db8869fba017f385934542b2c67fd42ef541a9679fe54f17f9e50abbbfafa0bb890e97bfcc603817659417ce23308740fdebc7d19b5d2c3b424e92c2e6c57ff45ff88ee310b80197ba49225d0bca0b4b9cfa37075aa6751323035ed7855c9ae8484dcaef00951a273"], 0x28}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 03:21:17 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {0x0, 0x0, 0x300}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:21:17 executing program 2: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000080)={0x6, 'batadv0\x00', {0xffff}, 0xe53b}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="240800002a002902000000000000000000000004", @ANYRES32], 0x2}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket(0x25, 0x3, 0xffffffff) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000240)=@security={'security\x00', 0xe, 0x4, 0x408, 0xffffffff, 0x268, 0x0, 0x268, 0xffffffff, 0xffffffff, 0x338, 0x338, 0x338, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ipv6={@ipv4={[], [], @rand_addr=0x3}, @rand_addr="1e18e234e070271e5af1bdd388900fc9", [0xffffff00, 0xffffffff, 0xff], [0xff, 0xff000000, 0xffffff00, 0xffffff00], 'vlan1\x00', 'syz_tun\x00', {0xff}, {0xff}, 0x67, 0x9, 0x5, 0x8}, 0x0, 0x138, 0x198, 0x0, {}, [@common=@srh1={{0x90, 'srh\x00'}, {0x0, 0x76, 0x9, 0x0, 0x8, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1f}}, @loopback, @dev={0xfe, 0x80, [], 0x39}, [0xffffff00, 0x0, 0x7fffffff, 0xff000000], [0xffffffff, 0xff000000, 0x0, 0xffffffff], [0xff, 0x0, 0xff, 0xffffffff], 0x100, 0x626}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1, [0xff, 0xff000000, 0xffffff00, 0xffffff00], 0x4e20, 0x4e23, 0x4e21, 0x4e20, 0x1, 0x2, 0x55f, 0x4, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) r4 = socket(0x10, 0x2, 0x0) splice(r0, 0x0, r4, 0x0, 0x4ffe0, 0x0) 03:21:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0x3, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) 03:21:17 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0xffffffff}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r3 = socket(0xa, 0x1, 0x0) close(r3) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r3, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x200}}], 0x20}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x10, &(0x7f00000000c0)={r4}, 0x8) [ 983.682987][T10328] netlink: 'syz-executor.1': attribute type 27 has an invalid length. 03:21:17 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {0x0, 0x0, 0x94b}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) [ 983.733537][T10328] sctp: [Deprecated]: syz-executor.1 (pid 10328) Use of struct sctp_assoc_value in delayed_ack socket option. [ 983.733537][T10328] Use struct sctp_sack_info instead [ 983.750852][T10332] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 03:21:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0x7, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) [ 983.851584][T10332] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 03:21:19 executing program 4: ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000080)={'sit0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14, 0x80000) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x76, &(0x7f0000000080)=@assoc_value={r2}, 0x8) 03:21:19 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {0x0, 0x0, 0x1400}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:21:19 executing program 5: pipe(&(0x7f0000000340)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r1, 0x0, r1, 0x0, 0x3, 0x5) r2 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000380)="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") write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f4070009041e11", 0x11) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) socket(0xa, 0x2, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240), &(0x7f00000006c0)=0xc) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={r6, 0x81, 0x10, 0x2}, &(0x7f0000000180)=0x18) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={r6, 0x4}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000100)={r7, 0x5}, &(0x7f0000000140)=0x8) syz_genetlink_get_family_id$ipvs(0x0) sendfile(r4, r3, 0x0, 0x100000001) 03:21:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0x25, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) 03:21:19 executing program 1: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0xf915ec8762bad1cd, 0x0, 0x0, {}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6}]}, 0x1c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) bind(0xffffffffffffffff, &(0x7f0000000440)=@sco={0x1f, @none}, 0x80) setsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0x200}, 0x8) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x4, r5, {}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffe0}]}}]}, 0x38}, 0x1, 0x1400}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="200027bda53d58939e7d7000fddbdf25020000000400d100087b0c3d0fa99030006a00b700000008006a0007000000080000000000"], 0x40}, 0x1, 0x0, 0x0, 0x890}, 0x40) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00010000f9ff000000000007000000", @ANYRES32=r7, @ANYBLOB="000004000a000200ffffffffffff0000"], 0x28}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0) 03:21:19 executing program 2: socket$kcm(0x10, 0x5, 0x10) pipe(&(0x7f0000000bc0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') recvfrom$llc(r1, &(0x7f0000000180)=""/40, 0x28, 0x0, &(0x7f00000001c0)={0x1a, 0x302, 0x2, 0x46, 0x7f, 0x20, @multicast}, 0x10) r3 = socket(0x10, 0x80002, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x4, r5, {}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffe0}]}}]}, 0x38}, 0x1, 0x1400}, 0x0) r6 = socket(0x10, 0x80002, 0x0) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x4, r8, {}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffe0}]}}]}, 0x38}, 0x1, 0x1400}, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x89ea, &(0x7f0000000580)="101f7d407f3cafc220607832aeb4fa1c1e30ce7df9356b833454786f7d6979965e0ca0c69e46d591de9bfa5002b97d50f6508b3321119b1ebc914737e31b4531907c1b4e8e9319f20213c481fd3c5c4a80f098bf6c1c70d4aed11347c33e448279f50000db23b6a9f602e117987c95835ecea596424c5637909bb92139b7bf3161e93f73e0cee34ff168c0f3d10d1aa0ac9d2da6d3abe290b500a371cd5481ab2d9ca9d5f050434f0b15d3c36e44a4b6af0bdb8e0bd774b416b48393c020bfc1") sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r2, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xeff3, 0xffffffffffffffff}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xffffff0a, 0xffffffffffffffff}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x40) recvfrom$inet(r0, &(0x7f0000000c00)=""/8, 0x8, 0x10102, &(0x7f0000000c40)={0x2, 0x4e23, @remote}, 0x10) r9 = socket(0x10, 0x3, 0x0) write(r9, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) setsockopt$inet_MCAST_MSFILTER(r9, 0x0, 0x30, &(0x7f0000000440)=ANY=[@ANYBLOB="000000000000000002004e20ac1414aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002004e22ac1414aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ff00000000000000000000000000004000"/272], 0x110) [ 986.111501][T10357] netlink: 'syz-executor.1': attribute type 27 has an invalid length. 03:21:19 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {0x0, 0x0, 0x3f00}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) [ 986.153788][T10360] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 986.197851][ T6991] tipc: TX() has been purged, node left! [ 986.204884][ T6991] tipc: TX() has been purged, node left! [ 986.206792][T10365] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 986.233207][ T6991] tipc: TX() has been purged, node left! 03:21:19 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8c}, [@ldst={0x5, 0x5, 0xe009}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1}, 0x48) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@filter={'filter\x00', 0xe, 0x4, 0x3a8, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@ipv6={@initdev={0xfe, 0x88, [], 0x1, 0x0}, @local, [0xff000000, 0x0, 0xff, 0xff000000], [0xffffff00, 0xff, 0xffffff00, 0xff], 'veth1_to_team\x00', 'team0\x00', {}, {}, 0x73, 0x75, 0x0, 0x8}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28, 'hl\x00'}, {0x1, 0xf7}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x8, 0xa6}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@mcast2, @initdev={0xfe, 0x88, [], 0x1, 0x0}, [0xffffffff, 0xff000000, 0xff000000], [0xff, 0xffffff00, 0xffffffff, 0xffffff00], 'batadv_slave_0\x00', 'macvlan0\x00', {}, {}, 0x1d, 0xf4, 0x1, 0x8}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "063cb26b799206409e04c247fa0e306a704d0f5990e78b17134f690799e2"}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) 03:21:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004940)='nl80211\x00') r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r1, 0x200, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4044091}, 0x40800) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000004d40)={0x0, 0x0, &(0x7f0000004d00)={&(0x7f0000004cc0)={0x28, r1, 0x907, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x28}}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f0000000180)={'filter\x00'}, &(0x7f0000000200)=0x78) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000080)={0x0, 0xfffffff8}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000100)={r5, 0x1}, &(0x7f0000000140)=0x8) write(r3, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000000)={'security\x00', 0x3, [{}, {}, {}]}, 0x58) 03:21:20 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {0x0, 0x0, 0x4b09}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) [ 986.425218][T10357] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 986.441935][T10368] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 03:21:20 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = accept4$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000340)=0x14, 0xc0000) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000380)={0x0, 'bridge_slave_0\x00', {0x1}, 0xdc}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000bc0)=ANY=[@ANYBLOB='P\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="000000000000000004000a000a000100726f7574650000002000020008000100000000000800030040000000040006000800020000000000"], 0x50}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}], 0x4924924924924b3, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 03:21:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x4, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) [ 986.509847][T10384] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 986.532813][T10387] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 986.588347][T10389] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 03:21:20 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {0x0, 0x0, 0x5800}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:21:20 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x73, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000040)={{0x3, 0xfffffffc}}, 0x10) 03:21:20 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x2, @empty, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e35, 0x0, @ipv4={[], [], @rand_addr=0x7fffffff}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) socket$inet(0x2b, 0x0, 0x0) 03:21:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x6, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) 03:21:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b80)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x9}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}]}}}]}, 0x44}}, 0x0) 03:21:20 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {0x0, 0x0, 0xf000}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:21:20 executing program 2: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @remote}, &(0x7f0000000100)=0x10, 0x80800) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000180), &(0x7f0000000200)=0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) read(r1, &(0x7f0000000240)=""/159, 0x9f) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={r2, 0xc0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x1a, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x3, &(0x7f00000000c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x1, 0x6c}}, 0x0, 0x8, 0xcf, &(0x7f0000000480)=""/207, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r3}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x94, &(0x7f0000000900)=ANY=[@ANYBLOB="b70200008cfe0000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00a0c5008500000026000000b7000000002000209500000000000000a5c45a695ecbcaf2b8e198452498a0055d5bc0842e6c1a3f1bd8c37784ae4eaeafeb6fc82b41900a1104921fc60701f3252b47ce97d5aa6e18eecafbb6b6b59a20c125af2a2169719e93e4d9960a71b3e52506794a3afef7d738e7928f2e4ef01890c04b3364d07e0dcf4e71cf53c91be6b9f8345f1755a1125895b1399807cfee2b6395db8f35a0dc420c732c71f0f56e1bacb6e9845b1658cefc59b2abdab83859546b52423b155687afc22bfd7c3f91e279de7119830720faf9298d1da8ac72786f703512a9683e53119caf5c11302fdf8c9efd431427c7688c8eabcfe7b642f43f1d5a0873b7d8ce7180451e21940000006c1b0b3a63e1a7c3b9e02305d85f95b287ff39d343dc59348e993ce667570f0000000000a64d1801041f8314fa01b1f8155e632cca10c6faeb25a28000000000000000d503b06c5408ef9348d1cc87f04543a1714f734692a123397b6bc8d1093bcdf614d90a0117da2b33444ab10b45e32e0e812bdea1e66ab057484021988ce12e0d21d4fbbe4a531d9efb2ca3d5ba143ae362eeb90fff00bc6c0000e6cb14c3770e9cabff01f764cce30bd5b07f86af3fa98c8f219adfeaf6d4f291a978ad363a9b6ed45df445f87d5bc8dd945d3cd43283a0e99e7f536bdea463ade6d75634b402ea1cbfbedbc79103139a75350301884e2213009f2405b4aba705b3620600642f0f1161f82e89dfc3c0ea4033903d3f9ec721f275f99d1717e0b3438c88804ea7a545e3488f0989034475c728ca8fcd1d7a78d76f15f4db85eeac19b2315edad5ce9b3ba96441e19ef6b3feac4cc2bfc6ef87b00dcb3b4f233c1f35140aea219c9d378b3346e5e22c81db2db8d7b7bd65dfa2a516f7d47801fc63844fab60b4baad8b0f9ee50663447704cf6a49627aff2496ccbd00ddf5eba89260254c41826dae5aa722ed81f25e485323566343143d7e6e0fed56120229956cb9093db4483769cd5a87fac05c469f2972ba47c55d6602a17592950dc04174cf39c26fa55881ba053d5637acaa87c161c917cec2d34d076720ef4ee9ffdcb484c64c97b13a62413ac9cc368fab17151bf4d5a5ead4a308c619ff1597209fc6927adee87e52944679f8993ce6a7934c3b43574c4e0a73f06d2461e69bad9a20496efa15013249ad9499000000000000001e182ca1c8032e1a6db8312f0228570ad963ec34203f30c52d39251e730f0500008b12ae21b962591725e567a8ebc7ebce44b77cce2f0fd90c86889f3b1218ade8203c4cf7b749b477b4cee2993e0500fea54608da671fce92b6c4cec6f9a1396e5bbebcb02c51c38eda1b0989a7a1e3c77863ba6229bc9d947d30822a8b2df0051d070009f8b647dc508879c84788339862e1ffe8a8062b64e56d86af3f04009e272e9e4c58da9c4c2fb1e2e9f218437ec3e6a64bf711f69fea22dbe2f0bb55f799f2505c919bc0a181110dd31673a95ce88e664b6a2c9bb2ca4d5c7ea19a45336573d603eaa889db04247901000100d9c97200"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r3}, 0x78) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r1, 0x10, &(0x7f0000000300)={&(0x7f0000000900)=""/4096, 0x1000, r3}}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000380)={0x1c, r7, 0xb0343aabd1184aaf, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) sendfile(r5, r4, 0x0, 0x100000001) 03:21:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x34, r3, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x8004) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) 03:21:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0xe, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) 03:21:20 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) [ 987.314973][ T26] audit: type=1804 audit(1586748080.979:726): pid=10434 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922123606/syzkaller.TgTSaq/723/cgroup.controllers" dev="sda1" ino=15761 res=1 [ 987.466489][T10442] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 987.507520][T10442] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 987.539423][T10442] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 03:21:21 executing program 2: socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0x84f0) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, &(0x7f0000000040)=""/184, 0xffffffc9, 0x40012500, 0x0, 0xffffffffffffff49) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) r4 = accept4$rose(r3, &(0x7f0000000200)=@short={0xb, @remote, @bcast, 0x1, @netrom}, &(0x7f0000000240)=0x1c, 0x800) write$binfmt_misc(r4, &(0x7f0000000280)={'syz0', "28dbbd651aab3d7bca748fca6416c2b1c0b0cc4304df5098824cb18ae168d7fdfb78cc1d20a97bff4428fb67956cc11c07455ca9bab34f68c59ecc3bce2ec5ae6a0194724d95e46a6d6a0ba04edfb13a5152306b3dc5ac85230c38a2ad6f5b9e2fd1fe7d6b8e09d651521eb3cbc37c26e1dde50be23ed8193b22e97e162655ee65d158185d5292b45cf7b81903ed104fabe15b1a92de8e73b01f94b9c8fa53fda62f91d2b9cccdb4f7e74386808f557a31490eee8ce7a1f95010b0da05451af249fdef4acca28211c2665f4382dee4276154cc6f4daafc"}, 0xdb) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$AUDIT_LIST_RULES(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3f5, 0x100, 0x70bd27, 0x25dfdbfc, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x81}, 0x4) mmap(&(0x7f0000827000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) 03:21:21 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x33}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 03:21:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x14, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) 03:21:21 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x3, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) [ 987.814310][T10442] net_ratelimit: 33 callbacks suppressed [ 987.814320][T10442] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 988.021121][T10466] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. 03:21:21 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0xc, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:21:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x6a, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) [ 988.371533][T10477] validate_nla: 10 callbacks suppressed [ 988.371544][T10477] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 988.437578][T10477] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. 03:21:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) 03:21:22 executing program 2: r0 = socket(0x0, 0x3, 0x2fa) write(r0, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) accept4$netrom(r0, &(0x7f0000000200)={{0x3, @bcast}, [@remote, @default, @bcast, @null, @bcast, @null, @default]}, &(0x7f0000000100)=0x48, 0x80000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x44, 0x30, 0x727, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7, 0x1, 'ct\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}}}]}]}, 0x44}}, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000340), 0x2) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$SIOCSIFMTU(r2, 0x8914, &(0x7f0000000080)={'batadv0\x00'}) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'batadv0\x00', 0xfffffffd}) sendmsg$IPSET_CMD_HEADER(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x44004}, 0x4000000) 03:21:22 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x11, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) [ 988.676810][T10490] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 988.759751][T10498] netlink: 'syz-executor.2': attribute type 27 has an invalid length. 03:21:22 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x1c, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:21:22 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000340)="11525f9703b326b727bd414a8381b1a68e5e7d113eb3c6162691d1397c394b57c88621115d0ff29fbd93ff7d003b75ba1189c3c0a2f7a558474dd4bc325fbb4248d2ff487d8bf53c350e9ec62fde54e1893ac4c7d38dd80b8aad7db7b721058e56d7eaedc748150f4d637be895cb21fc3d5e37287d96de2cab18b8365b16e0489529857b3c4207c8f1fb979ce7da25c94d069ee3a1cb17171fadb354f1fae0eafe3c0120871b", 0xa6) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0xae, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) r2 = socket(0x1, 0x4, 0x80000000) write(r2, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="23c95621f028f2197ea85b60ade1c137ed000035228fd87deb82a37cd2464b7cafa43f4d7f1f559523452d3430be15e0d5cd7b490c89e55e82f2f5cf6065f345df6016", @ANYRES16=r4, @ANYBLOB="0004000000000000000009000000240004800c00078008000500010000001300010062726f6164636173742d6c696e6b0000"], 0x38}}, 0x0) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r4, 0x400, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20}, 0x4004000) accept(0xffffffffffffffff, &(0x7f00000041c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000004240)=0x80) sendto$inet(r1, 0x0, 0x0, 0x34040ff8, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) sendto$inet(r1, &(0x7f0000000300)='\r', 0xc3f2, 0x11, 0x0, 0x0) accept4$inet6(r0, &(0x7f00000002c0), &(0x7f0000000500)=0x1c, 0x80800) r5 = accept(0xffffffffffffffff, &(0x7f0000000200)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f00000004c0)=0x80) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r5, 0x800448d3, &(0x7f0000000400)={@none, 0x7fffffff, 0x1, 0x7, 0x7, 0x9, "79fe477e142a079dfdb6593083237993823568c3481d52c8c2b8159c432852ae20a83486e4b17f6dba0190a454b1b9e4da371134948bb93a8d8c07ed5d536b2576f0f647636bb97b4a409ba98ebeccdb3ef27821c2d8618ed4530b2952714446ecd1435f1f83b0cd8c7b9ae67b5b771092cc0c6113cb33996e5acb2f0a68016f"}) 03:21:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x1, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) [ 988.917896][T10505] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 988.959122][T10507] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 03:21:22 executing program 1: pipe(&(0x7f0000000340)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xd86dac9, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={r6, 0xc0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x1a, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x3, &(0x7f00000000c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x1, 0x6c}}, 0x0, 0x8, 0xcf, &(0x7f0000000480)=""/207, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r7}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x94, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r7}, 0x78) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x7, 0x1, &(0x7f00000000c0)=@raw=[@jmp={0x5, 0x0, 0x7, 0xb, 0x7, 0x80, 0xfffffffffffffff0}], &(0x7f0000000100)='GPL\x00', 0x80, 0x0, 0x0, 0x40f00, 0x1, [], 0x0, 0x16, r3, 0x8, &(0x7f0000000140)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x7, 0x7ff, 0x10000}, 0x10, r7}, 0x78) pread64(r8, &(0x7f0000000240)=""/64, 0x40, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000300001000000000000000000000000dc400001003c00010008000100696665"], 0x1}}, 0x0) sendfile(r4, r3, 0x0, 0x1000001fe) 03:21:22 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x30, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) [ 989.242435][T10498] netlink: 'syz-executor.2': attribute type 27 has an invalid length. 03:21:23 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev, 'lo\x00'}}, 0x1e) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCSMRU1(r4, 0x40047452, &(0x7f0000000040)=0x6) sendfile(r3, r1, 0x0, 0x100000001) 03:21:23 executing program 1: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x3c, &(0x7f0000000300)=[@in={0x2, 0x4e21, @dev}, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @in={0x2, 0x4e22, @multicast1}]}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x28, 0x803, 0x40000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2, @ANYBLOB="08000a00272c292ddedb1c6709a88941261c7699143f0cd388e4fc1638e9bffc71d8d57f86fcca2ead4c28305f5b3cf0d368c08a0e88da7c001db35be0f300465a2334182b3740283c5cf1801cd299cdba0d6e584a1f5d905b863fc04ca85493a6f16f62d290ed4c99699958fe7b59ea6e50291c2c8d492dfd17cb8425f47840684b2f02dc516ae2988c1820f9cc02e9ed40717fcc3f199dd7794f03cab5642a2c18b4389367534b37a1bc4b7e6691c67bc0fee16e5ecbdf243192dbc5de564fbc25443b996f1121c2f37edb", @ANYRES32=r2, @ANYBLOB], 0x44}}, 0x0) r3 = socket(0x2b, 0x1, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") 03:21:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x3}]}]}}]}, 0x40}}, 0x0) [ 989.432792][T10525] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 03:21:23 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x6, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) [ 989.537656][ T26] audit: type=1804 audit(1586748083.199:727): pid=10527 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922123606/syzkaller.TgTSaq/726/cgroup.controllers" dev="sda1" ino=16097 res=1 [ 989.715315][T10540] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 03:21:23 executing program 5: setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xfd58) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="4800000010000507000000000000000000000004", @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b2000000000008c338631ab99df55c8cdda650dc5d299369bdb035f5dacd1b50c4963d1bade60334de354e6038a791d20fc0f5fd9bc0c23f39acb14a848beb97468a44b18738abd23826014459d389a796956ebabf4dfeb30c8a8f9321852fe387f8e1b53f28dffd23bc369edf61adf3e895503d1a153576bd959398caa0484c5932319a9b10153db51e3d"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) r6 = socket(0xa, 0x2, 0x0) r7 = socket(0xa, 0x1, 0x0) close(r7) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000680)={r9}, &(0x7f00000006c0)=0xc) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000080)={r9, 0x81, 0x10, 0x2}, &(0x7f0000000180)=0x18) sendmmsg$inet_sctp(r5, &(0x7f0000000380)=[{&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x6, @ipv4={[], [], @multicast2}, 0x7dc1}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000000c0)="91b895bcbe6f9d44da81dc10a37b1b8715bc1a44a82637d9398c4b7f6f97e36281d97f", 0x23}, {&(0x7f0000000280)="8ea331cce5b5e8081f380212434fe0582515612e831675f95ec13a3ff6b3739b3496ff88881b1e6f034d214d4f317a90f1976bbed9ff92a14e9f4b377453043cb5fdc8c9f80b8c0c77edfb0c376e7e75c7e814a1689719a2f5c70fd384ce594ae4fcb5aa64b37d58c838f74b02", 0x6d}], 0x2, &(0x7f0000000340)=[@sndinfo={0x20, 0x84, 0x2, {0x2, 0x3, 0x7ff, 0x1ff, r9}}, @dstaddrv4={0x18, 0x84, 0x7, @broadcast}], 0x38, 0x48800}], 0x1, 0x20000000) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xf}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x12}]}}]}, 0x3c}}, 0x0) [ 990.028326][T10533] veth15: Device is already in use. [ 990.029642][T10547] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 03:21:23 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$caif_seqpacket(0x25, 0x5, 0x3) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000440)) syz_emit_ethernet(0x42e, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) [ 990.279319][T10535] veth15: Device is already in use. 03:21:23 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x8, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) [ 990.342748][T10561] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 03:21:24 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) r2 = socket(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x28, r3, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={[], [], @remote}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4040880) write(r2, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000040)=[@mss={0x2, 0x24b0}, @timestamp, @window={0x3, 0x7, 0x1ff}, @sack_perm], 0x4) bind$rxrpc(r1, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) write$cgroup_subtree(r4, 0x0, 0x3f00) close(r4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) socket(0x0, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) 03:21:24 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000000)=0x9, 0x8) vmsplice(r1, &(0x7f0000000040), 0x46, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r3, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r3, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, &(0x7f0000000040), &(0x7f00000000c0)=0x30) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 03:21:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x6}]}]}}]}, 0x40}}, 0x0) 03:21:24 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'\x00', 0x20000005402}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x2b, 0xfffffffffffffe7f, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001fffffff00004000632f77fbac141412e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x0, 0xfffffffffffffe09}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x0, 0xdf, 0x1000, &(0x7f0000000100)="15eceb6697b02f4a1fbcbf4edb2bdd8173edc93579bc3214a4e6e5454699f81a3f32e5f0f1bfdd4142d1ef30ba4cae38f9847800a45670c971b92158c86ca0725484786076c358d3a17c5a6c9d326c84ac204bcb37a7a3966e25fcc21eaf1aa10bf8a61ef7c15056e4ff0087f013551b21fc099a52f16e8b747f8def57dce22193900137877299443509d57d57b2bcb49887e1ea5f04d21b2c863d27c484490853410236d22e67d6988f5804f8ea2fb6fea3820e6e4af40cc59e67628cb42d86846e35e410bb41340ca75f6b99e24887045fbf273c92df8efecdd013c25eaf", &(0x7f0000000500)=""/4096, 0x9, 0x0, 0xef, 0x7c, &(0x7f0000000200)="4d60560007643767e33a1dbb08fabb3179ebb3cfad291bdc2947e8923f2aae1b4aac87dc01fec24dbf27800c90bf7548a48602dda72b5ccd578d0af2c1dea0d564c0c55224e56cad217e43ebd14412cbfaaf7f0b2959b9ffabf7a6d4241e0c39f419d99509c03b567fd0dd12f71251c94c95352fef9b98dbbf9297745cced3314bba87ad197b0207bd4f2c080d63efc783ce2645b9624b787ffb4d385c7140eed1ef556e21bef0804518ed79a8a4c56c7f135ec321802eb40ceaa85f6bd96a9ed6ce05208a5b8a320cd0398bb2a2d103be39e5f729a235f306c2f0cf7d9ef99d05bcb039991185b3516014f5e37a44", &(0x7f0000000000)="bb7cb1edcfa782f44c7e70c07edf8c00fcfe01f92bd53835cfe4a22bf3225492b2440d4fa31a72634f6bc931794c38a99d105c3e1d59542dc7909af8740d0cfdccfb042a4401ce3b6abdcb1a47d0ada800e7b16e53ff2ec35fd86c1b0e2bb2c3009084d04a2119f0dd68e1eb6b5ccc70e5b39e90b4698cdff4ad9f8a"}, 0x40) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x19) ioctl$TUNGETFILTER(r0, 0x400454d0, 0x0) 03:21:24 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x9, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:21:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) splice(r1, &(0x7f0000000000)=0x4, r2, &(0x7f0000000040)=0x3e6, 0x7ff, 0xc) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f00000000c0)=0x9, 0x4) sendmsg$NFT_BATCH(r3, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000020a0514000000000000000001001b00140000001100010000000000000000000000000af328497c8f419dc1a26becd02765045b7fd1026a1676218e52c909cd421f76ef6c1e37b06995f1c0e6cbf188442aae6687580e55d3bae8682f9ef9443f466f31f06f0f3cbee5e190d764e169ceb277cfaa114fb48a8f881d3c6ff9396077823a8682079bca4fefc081b39d1418be84849bfa0435b51bf89084bbf9c358841bc8e4102fb11f2328a9ac9988057c439bc20e3852802da04c05422715"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) [ 990.812851][T10584] tap0: tun_chr_ioctl cmd 1074025680 03:21:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) 03:21:24 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0xa, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:21:24 executing program 1: r0 = socket$inet(0x2, 0x2000080001, 0x82) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x5}, 0x8) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000340)="da", 0x1a000}], 0x1}, 0x0) [ 991.153173][T10618] tap0: tun_chr_ioctl cmd 1074025680 03:21:24 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0xb, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:21:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x9}]}]}}]}, 0x40}}, 0x0) 03:21:25 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000080)) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_netdev_private(r0, 0x89f3, &(0x7f00000000c0)="7e1e1d0b5827526da05bd6598b3bbeb4e6d96471e0f6e7c3581983421e0230f9f327d7425279042605e0defaca90e30673f68750c8e942a442487e9653310570adab3fb784668e36fc7ec73a69c4a7da694371cfa56aeb87bca54fd4a8790bb489ac19f27ddbbc22347550f8d7f811a5d9fce53e0809bf712778eb6c03ab3a222748d5eb0bbdffdafba0586fb9e13e2c00ed832527228e9f5eec727d85a88dcce149936e2beda40421efbbfdae3337232bf33d50b75ba39a1b76cbd97fa0cd9ff222547f77795bda088f16e2c983c2dc6939486ee74a3fac68b46b102d") ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") syz_init_net_socket$netrom(0x6, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000d26000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000d27000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000023000511d25a80648c63940d0424fc60040006400a0003000200000037153e370a00018002000000d1bd", 0x33fe0}], 0x1}, 0x0) 03:21:25 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0xfffc, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8010, r1, 0xedeeb000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000006440)={0x0, 0x0, &(0x7f0000006400)={&(0x7f0000000000)={0x2c, r4, 0x205, 0x0, 0x0, {0x3}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}]}, 0x2c}}, 0x0) sendfile(r3, r2, 0x0, 0x100000001) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") 03:21:25 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x10, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) [ 991.460875][T10639] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:21:25 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) write$binfmt_script(r0, &(0x7f00000009c0)=ANY=[], 0x378) sendto$inet(r0, &(0x7f0000001340)="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", 0xd00, 0x0, &(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0a268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff900b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f70055d88fecf90b1a7511bf746bec66ba", 0x4d, 0x2081, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000e14020025bd7000fcdbdf2508003c0002000000080001000200000008003c00000000000800010000e2ffff070001f52b000000a2d2b12501000000f27f4134fc0ce137e2f6e35a04373813fc847bdcef1dcb43c387b5fc0058f6f069a90392176312d71bde3bf3596e3ab2605b9a6bf1ffc1ecb1df77bcb3bfecec78f5e64140e7b1edd5a847757e397c1d15862f0c115a0ba31c05ebaedcf0d827b50086866d32ab89c8315c172cb1bf551060215ff7670cbc789d7177fa353a4bc4d0aa1ee714e6ee5bcc15c069d44388b51e3f8cb404f4068e960cd438970ccd645797c1baed8f01afa0"], 0x1}}, 0x4) pwrite64(r3, &(0x7f0000000400)="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", 0x200, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0) [ 991.579916][T10646] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.1'. 03:21:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0xa}]}]}}]}, 0x40}}, 0x0) 03:21:25 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x11, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:21:25 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x4ca, 0xff, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0)='wireguard\x00') [ 991.827107][T10661] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 991.885947][T10661] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:21:25 executing program 1: socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x2, 0x0) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0xa4, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x20000003}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4}}]}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0xa4}}, 0x0) 03:21:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0xb}]}]}}]}, 0x40}}, 0x0) 03:21:25 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x12, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:21:26 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100)="84440cf2c264032eae35d3e9be79fcb6060a7fa807acb2f25602989113396bc2cd40d711a143ee2bb17cba59da5aef896a166cb06b87f31cd206b82e807fda46d879ea471f1f1bd7bdbf99f62f72e47f4dcb7905c133f080fdcb51595f2be5a7a79a570865", 0x65}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) openat$cgroup_type(r2, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r1, 0x0, 0x100000001) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r6, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r6, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) ioctl$sock_inet_SIOCGIFBRDADDR(r6, 0x8919, &(0x7f0000000200)={'team0\x00', {0x2, 0x4e24, @empty}}) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000880)={&(0x7f0000001000)=""/102400, 0x120000, 0x1000}, 0x1a) 03:21:26 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x13, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) [ 992.436070][ T26] audit: type=1804 audit(1586748086.099:728): pid=10648 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922123606/syzkaller.TgTSaq/729/cgroup.controllers" dev="sda1" ino=16049 res=1 03:21:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0xf}]}]}}]}, 0x40}}, 0x0) [ 992.511165][ T26] audit: type=1804 audit(1586748086.099:729): pid=10651 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir922123606/syzkaller.TgTSaq/729/cgroup.controllers" dev="sda1" ino=16049 res=1 [ 992.606046][ T26] audit: type=1804 audit(1586748086.219:730): pid=10694 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir080444537/syzkaller.UzUSE7/752/cgroup.controllers" dev="sda1" ino=16209 res=1 [ 992.747814][T10705] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 992.762102][ T26] audit: type=1804 audit(1586748086.419:731): pid=10689 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922123606/syzkaller.TgTSaq/729/cgroup.controllers" dev="sda1" ino=16049 res=1 03:21:26 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa4ea35c9f13fc86dd60083ff200040600fe8000000000000000000000000000bbfe8000000000000000070000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000240)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r1, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) write(0xffffffffffffffff, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c0000001000850d00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012000c0001006d616376746170000400020008000500", @ANYRES32=r5, @ANYBLOB="96f47bc9e73d8e58347db0a4ca5312a94b0e9ee6e094926355fb6b1a2f77f07703629b687a918678c9d8ad9a404b567539de52be1faa405d7960bbe549065a628dc5178ff0ccd20a78707f647698c2631596f99e173d5aadb15a59246f291eedb0bdd05202d1cbec6d2f6b85c52a49643d6d4b3f11b0be75bebc00d085f18d560e67432b4ec89a756f4f62e709e6a1006d7bc8fe633c0ef17248f732221ac1c78b30c3b5393b8bb98a556a25c05e1bf84efa48110c10e3886b5c8eaa27088f1c7972c2daa68e65e3e422d1ff73a1e9a7691d332f354161dbfe79f0824a1c9f33fbc1fda25091bdeb8dffc49fbb"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) 03:21:26 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[]}}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000000)={'rose0\x00', 0x600}) ioctl$TUNGETIFF(r3, 0x800454d2, &(0x7f0000000080)) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={r2, 0x0, 0x6, 0x0, 0x0, 0xfffffffc}, 0x14) 03:21:26 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x14, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:21:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x10}]}]}}]}, 0x40}}, 0x0) 03:21:26 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="3400000010000104000009ec3f00000000000000", @ANYRES32=r2, @ANYBLOB="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"], 0x34}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f0000000140)={0x20, 0x2, 0x8, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8004}, 0x200000a0) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x1, 0x803, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl(r8, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r9}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}, @IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x40}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010040d070000006fff0300", @ANYRES32=r10, @ANYBLOB], 0x3}}, 0x0) r11 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f0000000400)={0x228, r11, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x100, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xffff8000}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x59fbb7ad}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa705}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6b21}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52c8dc9e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x210b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7e1f9149}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3ab7858a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1d07}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x586af89}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaa12}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2995}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2ed175f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x22c210b2}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x738a59fc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6d4550d8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xadbc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8e78}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4d3c534b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf488}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2bec42ef}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4a9a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x36d4ab1d}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x36d4dd4e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4f7252a6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x776d334b}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0xc0, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6ed1607a}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3257e422}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x93}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a97142c}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6577a024}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x45}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7b745bc4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x54}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x31f1be22}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5dfed9fc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb2}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f865f8}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x228}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r7, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[]}, 0x1, 0x0, 0x0, 0x4044814}, 0x40) 03:21:26 executing program 5: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38004b9f000024009f72f0ed56f0cfec51c7211efeb5e5c0967f6a489fee821bab06a32c12323db28c0bb4c462d4abf6e909e6bfa33edb6e5c71b38fbc2e56cdadf46c7dea2b3f63b0482f562a8b432cd4ec1aaf68", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x24, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=@newtfilter={0x2c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x2c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmmsg$alg(r0, &(0x7f0000000200), 0x4924924924926d3, 0x0) 03:21:26 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) [ 992.981261][T10714] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 993.091580][T10716] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 03:21:26 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x3, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) [ 993.204700][T10732] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:21:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x11}]}]}}]}, 0x40}}, 0x0) 03:21:26 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x48, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x48}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="c0000000170a01020000000000000000010000010c00054000000000000000050800074000000000080007400000000108000740001400000900010073797a3000000000080007400000000108000740000000014400038008000140000000000800024000000002080002400000000208090140000000000800014000000000180003801400010076657468315f906163767461700000000900010073797a30000000001c00030000000000000003006d6163767461703000000000000000002fd0849f98bc5ac2"], 0xc0}, 0x1, 0x0, 0x0, 0x4001}, 0x4000810) sendfile(r2, r1, 0x0, 0x100000002) [ 993.349877][T10751] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 993.452731][ T26] audit: type=1804 audit(1586748087.109:732): pid=10753 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir080444537/syzkaller.UzUSE7/753/cgroup.controllers" dev="sda1" ino=16284 res=1 03:21:27 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r2 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r3 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r3, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r3, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) r4 = accept(r3, &(0x7f0000000000)=@nl=@proc, &(0x7f0000000100)=0x80) ioctl$IMCLEAR_L2(r4, 0x80044946, &(0x7f0000000180)) [ 993.603322][T10716] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 03:21:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0xe) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0045ccb50100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5afbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05", @ANYRES32=0x0, @ANYBLOB="b3ef461584d1f8f00d3263dad7db03cd958b241cdcc2aedc4f4763f232ba26b46b0d03725e4e96454c5bfb873fc313a2c594d447d54e46d0583c"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x4000000, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800"/20, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00\r\x00\x00\x00'], 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = accept(0xffffffffffffffff, &(0x7f00000004c0)=@alg, &(0x7f0000000540)=0x80) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r9, 0xf915ec8762bad1cd, 0x0, 0x0, {}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r7, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000004}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, r9, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000040}, 0x8000) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x54, r10, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x54}, 0x1, 0xa00000000000000}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xf4, r10, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xff}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x24}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffffb}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x10}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x768c}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3ff}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x26b}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x500, &(0x7f0000000200)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x3, r4}}, 0x20}}, 0x0) 03:21:27 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x14, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:21:27 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x7001}, 0xc) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r3 = socket(0x1e, 0x1, 0x0) sendmsg(r3, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmmsg(r3, &(0x7f0000005c40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)=""/141, 0x8d}], 0x1, &(0x7f0000000400)=""/189, 0xbd}}], 0x1, 0x0, 0x0) write$binfmt_elf32(r3, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) socketpair(0x25, 0x80000, 0x40, &(0x7f0000000980)={0xffffffffffffffff}) connect$rose(r4, &(0x7f00000009c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, [@null, @default, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x40) accept4$tipc(r3, &(0x7f0000000040)=@name, &(0x7f0000000080)=0x10, 0x80000) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0xc040}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r5, &(0x7f0000000680)={0x0, 0x8900, &(0x7f0000000200)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe, 0x1, 'wireguard\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x40}}, 0x0) socket$netlink(0x10, 0x3, 0x0) 03:21:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x12}]}]}}]}, 0x40}}, 0x0) [ 994.179554][ T26] audit: type=1804 audit(1586748087.839:733): pid=10756 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir080444537/syzkaller.UzUSE7/753/cgroup.controllers" dev="sda1" ino=16284 res=1 03:21:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_WINDOW={0x8, 0x2}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}]}, 0x48}}, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) getsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000000)=0x7ff, &(0x7f0000000040)=0x4) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f00000002c0), &(0x7f0000000300)=0x4) bind$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f00000001c0)=""/131, &(0x7f0000000080)=0x83) [ 994.403777][T10792] validate_nla: 10 callbacks suppressed [ 994.403787][T10792] netlink: 'syz-executor.1': attribute type 27 has an invalid length. 03:21:28 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x19, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) [ 994.445171][T10792] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 994.533558][T10791] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 994.556849][T10791] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 994.632180][T10791] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 994.633131][T10792] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 994.661583][T10811] netlink: 'syz-executor.1': attribute type 27 has an invalid length. 03:21:28 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) syz_emit_ethernet(0x87, &(0x7f0000000100)={@local, @random="4ea35c9f13fc", @void, {@ipv6={0x86dd, @tipc_packet={0x5, 0x6, "ac5344", 0x51, 0x6, 0x9, @rand_addr="b99d590c12a3b4c47869ff3a2771e4b2", @local, {[@routing={0x2f, 0x4, 0x1, 0x7, 0x0, [@local, @mcast2]}], @payload_named={{{{{0x29, 0x0, 0x1, 0x1, 0x0, 0xa, 0x3, 0x2, 0x8, 0x0, 0x0, 0x8, 0x1, 0x2, 0x4, 0x4, 0x3, 0x4e22, 0x4e24}, 0x4}, 0x0, 0x2}}, [0x0]}}}}}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") syz_emit_ethernet(0x56, &(0x7f00000001c0)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0x2}]}}}}}}}}, 0x0) 03:21:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x13}]}]}}]}, 0x40}}, 0x0) [ 994.682217][T10791] netlink: 'syz-executor.1': attribute type 2 has an invalid length. 03:21:28 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x28, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:21:28 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="6c00000024000705ff00"/20, @ANYRES32, @ANYRES16=0x0], 0x3}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 03:21:28 executing program 2: r0 = socket(0x10, 0x80002, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000980)=ANY=[@ANYBLOB="500000001000074774270600355721540001a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x50}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@dev, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000000)=0xe8) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x0) 03:21:28 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:21:28 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r2, 0x400442c9, &(0x7f0000000140)={0x7, @local}) write(r2, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) r3 = accept$netrom(r2, &(0x7f0000000040)={{0x3, @default}, [@bcast, @netrom, @netrom, @remote, @rose, @rose, @rose, @default]}, &(0x7f00000000c0)=0x48) accept(r3, 0x0, &(0x7f0000000100)) shutdown(r0, 0x0) 03:21:28 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, 0xa, 0x6, 0x801, 0x0, 0x0, {0xc916b74320ecaf1a, 0x0, 0x7}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3f}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000055}, 0x4000000) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000080)={0x1, 'sit0\x00', {}, 0x3}) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) ioctl$IMGETVERSION(r2, 0x80044942, &(0x7f0000000040)) r3 = socket$caif_seqpacket(0x25, 0x5, 0x2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r3, 0x8982, &(0x7f0000000000)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40046629, &(0x7f0000001300)={0x2880008}) 03:21:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x14}]}]}}]}, 0x40}}, 0x0) 03:21:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000280)={0x1, 'netpci0\x00', {}, 0x6}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f00000002c0)={{0x2, 0x4e20, @loopback}, {0x1}, 0x20, {0x2, 0x4e22, @rand_addr=0x7}, 'syzkaller1\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) pipe(&(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000c40)={0x0, @in6={{0xa, 0x4e24, 0x4, @remote, 0x6}}}, 0x84) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xf}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x0, 0x8}}}]}]}]}}]}, 0x50}}, 0x0) [ 995.354178][T10842] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 995.391901][T10842] device team_slave_0 entered promiscuous mode [ 995.398525][T10842] device team_slave_1 entered promiscuous mode [ 995.406015][T10852] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 995.476469][T10842] device macsec1 entered promiscuous mode [ 995.497317][T10842] device team0 entered promiscuous mode [ 995.563451][T10842] device team0 left promiscuous mode [ 995.569901][T10842] device team_slave_0 left promiscuous mode [ 995.576604][T10842] device team_slave_1 left promiscuous mode 03:21:30 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x8, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:21:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5, 0x2}]}]}}]}, 0x40}}, 0x0) 03:21:30 executing program 4: unshare(0x40000000) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="04009bd66c6a209ff64351bf98cf492c8e574506e8fd5bdf4b786c771f348c23bfe246a5c4826ee35a72e14c81522bd95148f15e5f2b2135d4315065ae12ac7a00"/83, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000140)=0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080)}], 0x1, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r4, 0x400, 0x70bd2d}, 0x14}, 0x1, 0x0, 0x0, 0x10044841}, 0x40049) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) connect$phonet_pipe(r5, &(0x7f0000000240)={0x23, 0x1, 0xff, 0xf7}, 0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000500), &(0x7f0000000180)=0x8) ioctl$SIOCAX25CTLCON(r1, 0x89e8, &(0x7f0000000300)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, 0x5, 0x8001, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @null, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) 03:21:30 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x11, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:21:30 executing program 1: r0 = socket$inet6(0xa, 0x7, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8) sendto$inet6(r0, &(0x7f0000000180)="bd", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) close(r0) 03:21:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5, 0x3}]}]}}]}, 0x40}}, 0x0) [ 996.729005][T10909] IPVS: ftp: loaded support on port[0] = 21 03:21:30 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000022d0000095002b000000000093adffa82255f674412d020000000000005ab5270c3797f57fe12ea7509e1fcfb0b3f4279e7b3460dd37536bedf6ba6bda6d2afee33025a30b45bdcf1d273683626e00dc254d570dca6b78ad833488cfe4109ed2049edd0d69613d3cd61f00158e6e0e8632151d72ab8abaa965230090e23973a55cc9403d8000000000000000e258f82b6ce72313a075bb49c52fa55342a620c30209377fb22746ecff030000000000257bab31f47975fd2ff5c39bccc3b8ca00b5b4f9eb5e84b1af1a8a2b36f8799632b6ca6f6977e334a4eefcd56eb6ee1e3f9b8916446f0a8c2a8a507cab0b04000000d1417bde5c829a765a78ccdc890943ecc2916f1407088b81195bb112a3471cbfe82eb5ca3f9e42049028900fb38ffa35e4712eefd64494210ebd0724bbe33ca3aff5ac814e7ea0fa4ad937d91f1484f0d64eed8f4d661aa8eaa7a384736c8fc4c37b9377557bfa4dd1f7ea38388686a46f6b93c9cbadb95c9161826942fc0ae0b11ae00a15aed2db19b59f94477d15d4a9c27c6b6d9d6053ef16f9f7d3e946c19d1993e87c9772dd8565c735e1fee580c9301fef96be02958a62808b84b79b177627c9d10c5ac3918f25baa0e94af1e167584298f1242e75760e8580181969174016"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x175, &(0x7f0000000040)=""/183}, 0x48) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000380)={r2, r0}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8983, &(0x7f00000003c0)={0x7, 'vcan0\x00', {0x9}, 0xd574}) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) r4 = accept4$packet(r3, 0x0, &(0x7f0000000400), 0x80000) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000440)) 03:21:30 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x300, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:21:30 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:21:30 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000000c0), 0x2) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5400000030002707000000000000000000000000400001003c00010007000100637400002c0002801800010000008d02b361d7f376000000000000000000000008000900ac1e0001060003"], 0x1}}, 0x0) sendfile(r3, r2, 0x0, 0x100000001) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x2, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8080) r5 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r5, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r5, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c40)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827f0000431ca711fcd0cdfa146ec56175037958e271f60d25b7937f02008b5e5a076d83923dd29c034055b67dafe6c8dc3d5d78c07f34e4d5b318e2ec0efd49897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a2d7cbdb9cd38bdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c21476619f28d9961b63e1a9cf6c2a660a17e3c184b751c51160fbcbbf35b1e7be6148ba532e6ea09c346dfebd31a08b32808b80200000000000000334d83239dd27080e71113610e10d858e8327ef01fb6c86adac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0182babc18cae2ed4b4390af9a9ceafd07ed00b0000002cab154ad029a119ca3c97278087001460f7cf5ef5ecdd65ede8d799018fc043a6560fc12c26694dc05f3ee22feea1834ddbda7f4226a1d080b75d279afeabe0839c50851ffded7714dc486acf373a8268f99d0bd888a06070de197afe04"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x2b, 0xfffffffffffffe7f, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001fffffff00004000632f77fbac141412e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x0, 0xfffffffffffffe09}, 0x28) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000100)=r6, 0x4) 03:21:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5, 0x4}]}]}}]}, 0x40}}, 0x0) 03:21:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newlink={0x6c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x38, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @empty}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @local}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1f}}]}}}, @IFLA_LINK_NETNSID={0x8}]}, 0x6c}}, 0x0) socket(0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) [ 997.270310][T10968] __nla_validate_parse: 2 callbacks suppressed [ 997.270320][T10968] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 997.381269][ T26] audit: type=1804 audit(1586748091.039:734): pid=10978 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir080444537/syzkaller.UzUSE7/757/cgroup.controllers" dev="sda1" ino=16193 res=1 [ 997.519596][T10969] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 03:21:31 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0xc}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) [ 997.711012][T10995] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 03:21:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r4, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={0x70, 0x1, 0x7, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x100000000}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4580}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008010}, 0x8000) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r5, @ANYBLOB="00000000100000002800120009000100766574680000000018008200140001000000000003262a815e58e23d952ad3765c8e41a5199ec2dc14d4fef3133b9ca88170d33a0b14c3100e85ab0350cb1ae99f99ab04ced08c8aa4ef33110730a77b6ec821", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_pedit={0x18, 0x0, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x80}}]}, 0x3c}}, 0x0) [ 997.901338][T10912] IPVS: ftp: loaded support on port[0] = 21 03:21:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) ioctl$SIOCX25GDTEFACILITIES(r3, 0x89ea, &(0x7f00000000c0)) getsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x31, 0x0, 0x300) 03:21:32 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x20}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0xfe6f) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000001300)={0x0, r1, 0x3, 0x9, 0x8}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x24, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0xc080}, 0x4000) 03:21:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5, 0x8}]}]}}]}, 0x40}}, 0x0) 03:21:32 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x11}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:21:32 executing program 5: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) r1 = socket$inet6(0xa, 0x803, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000008440)=[{{0x0, 0xfffffffffffffdb2, 0x0}}], 0x1, 0x0) 03:21:32 executing program 2: sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0xa, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x80, r2, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:modules_dep_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'rose0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="e8000000", @ANYRES16=r2, @ANYBLOB="100025bd7000fddbdf250300000008000400ffffffff14000200cb839214f08efaf99c76ad2458e3a48f080004007f00000105000100000000001400060076657468315f766c616e00000000000014000300fe800000000000000000000000000032"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x40800) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x37e7, 0x24ba1dc0}) write$binfmt_script(r3, &(0x7f0000000200)=ANY=[], 0xfffffd37) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") close(r4) 03:21:32 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept4(r1, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0xf915ec8762bad1cd, 0x0, 0x0, {}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'geneve1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x800) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e4800002a000505d25a80648c63940d0224fc60100003400a000000053582c137153e370907088000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000300), &(0x7f0000000340)=0x4) sendmmsg$inet(r5, &(0x7f0000000a40), 0x1, 0x0) listen(r5, 0x6) accept$inet6(r5, &(0x7f0000000200), 0x0) [ 999.202028][ T26] audit: type=1800 audit(1586748092.859:735): pid=11060 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="cgroup.controllers" dev="sda1" ino=16304 res=0 03:21:32 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x1c}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:21:32 executing program 4: pipe(&(0x7f0000000100)) socket(0x10, 0x6, 0x0) socket$inet(0x10, 0x2, 0x0) socket(0x10, 0x80002, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) pipe(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x74, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x203}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x8, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x80000000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1000}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x74}}, 0x0) 03:21:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5, 0xe}]}]}}]}, 0x40}}, 0x0) 03:21:33 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRESDEC=r2, @ANYRES32], 0x5}}, 0x0) r6 = socket(0xa, 0x2, 0x0) r7 = socket(0xa, 0x1, 0x0) close(r7) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000680)={r9}, &(0x7f00000006c0)=0xc) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000080)={r9, 0x81, 0x10, 0x2}, &(0x7f0000000180)=0x18) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000200)={r9, 0x6}, 0x8) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @local}]}}]}, 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 999.435933][T11071] validate_nla: 12 callbacks suppressed [ 999.435942][T11071] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 999.452518][T11070] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 999.506999][T11071] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 03:21:33 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x30}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) [ 999.726097][T11085] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 03:21:33 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000040)) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0902000000000500040002"], 0x3}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) 03:21:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5, 0x3e}]}]}}]}, 0x40}}, 0x0) 03:21:33 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8, 0xb}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:21:33 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000000)=0x1) ioctl$void(r0, 0x5451) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7}}) write$tun(r0, &(0x7f0000001980)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "a5c268", 0x10, 0x3a, 0x0, @dev, @mcast2, {[], @ndisc_ra}}}}, 0x42) [ 1000.230509][T11077] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1000.254788][T11098] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1000.287596][ T26] audit: type=1804 audit(1586748093.949:736): pid=11095 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922123606/syzkaller.TgTSaq/734/cgroup.controllers" dev="sda1" ino=16310 res=1 03:21:34 executing program 5: socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x11, 0x800000003, 0x0) socket$inet6(0xa, 0x80003, 0x6b) socket$inet(0xa, 0x5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x6, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet(0x2, 0xa, 0x0) socket(0x10, 0x4000000000000002, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3fb, 0x300, 0x70bd25, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x84}, 0x40) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) [ 1000.369851][T11109] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 1000.386066][T11095] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 03:21:34 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8, 0x11}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:21:34 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000004, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES64], 0x1}, 0x1, 0x0, 0x0, 0x81}, 0x15) sendfile(r2, r1, 0x0, 0x1ffff001e) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r4, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r4, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0xffff, @broadcast}}, 0x24) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000140)={0x10000000}) connect$pptp(r3, &(0x7f00000000c0)={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1e) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x100, 0x0) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000100)=0x4067042) [ 1000.777741][T11130] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 03:21:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5, 0x300}]}]}}]}, 0x40}}, 0x0) 03:21:34 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8, 0xa00}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:21:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'rose0\x00', 0x600}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000002c0)={'veth0_to_team\x00'}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e657665000020000280050008000200000014000700fc00000000000000000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="9c5d7fa9e4b1eae601e9777aad62ebfb1fe873744f29083ee56b0592f0d61f2f1d133cdf000000000000000937bada4b0000000000", @ANYRES32=r0, @ANYBLOB], 0x7}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x58, 0x4, 0x8, 0x401, 0x0, 0x0, {0xc, 0x0, 0x8}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf9}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x81}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xc00000}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x29}]}, 0x58}, 0x1, 0x0, 0x0, 0x400c815}, 0x0) 03:21:35 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) [ 1001.519497][T11153] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 03:21:35 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)=ANY=[@ANYBLOB="3000000010000108512695f2c347fb2100000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b"], 0x3}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200)='NLBL_UNLBL\x00') r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x80, r4, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:modules_dep_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'rose0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0xe0, r4, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:lvm_control_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip_vti0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr="e3252caac25a0a31ba3fb4bd4e49fdb6"}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:gpg_helper_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_virt_wifi\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20000084}, 0x20000004) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) openat$cgroup_subtree(r1, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x84ffe0, 0x0) 03:21:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5, 0xeb00}]}]}}]}, 0x40}}, 0x0) [ 1001.745714][T11166] netlink: 'syz-executor.2': attribute type 27 has an invalid length. 03:21:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000040)=@gcm_128={{0x304}, "6c3ffa35f9878d22", "20b35fd8f4693876c64e6ec4b36c7f42", "1f7c9ab2", "fa01de4eaae0657e"}, 0x28) r3 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r3, 0x110, 0x4, &(0x7f0000000080)=0x2, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x28, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 1002.003841][T11173] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 03:21:35 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) [ 1002.071440][T11169] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1002.101402][T11169] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1002.152042][T11169] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1002.178560][T11169] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1002.257546][T11169] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan2: link becomes ready [ 1002.268501][T11169] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan3: link becomes ready 03:21:36 executing program 1: socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0xd, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0xed8f322dd9d9ad26}, 0x4004044) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000b00)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000080)=0x1000, 0x4) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x22004010}, 0x20085) write(0xffffffffffffffff, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000001c0)=0x5, 0x4) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000480)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000225bd7000fe00000000000071600034001b251609ffffe391c00e160008004b10070000000800a50001000000"], 0x34}, 0x1, 0x0, 0x0, 0x24008040}, 0x60000040) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x705, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x4000, 0xc02}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_WINDOW={0x8, 0x5, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 03:21:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5, 0xec00}]}]}}]}, 0x40}}, 0x0) 03:21:36 executing program 4: socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) pipe(&(0x7f0000000100)) socket(0x10, 0x803, 0x0) socket$inet(0x10, 0x2, 0x0) socket(0x10, 0x80002, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$ax25(0x3, 0x5, 0x0) pipe(&(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000080)=0x68) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) 03:21:36 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) getsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f0000000080)=0xffff, &(0x7f0000000100)=0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) write$binfmt_script(r0, &(0x7f00000009c0)=ANY=[], 0x378) sendto$inet(r0, &(0x7f0000001340)="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", 0xd00, 0x0, &(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/73, 0x49}], 0x1, &(0x7f0000000240)=""/58, 0x3a}, 0x48000000}, {{&(0x7f00000002c0)=@pppol2tpv3in6, 0x80, &(0x7f0000000640)=[{&(0x7f0000000340)=""/148, 0x94}, {&(0x7f00000004c0)=""/114, 0x72}, {&(0x7f0000000440)=""/64, 0x40}, {&(0x7f0000002040)=""/4096, 0x1000}, {&(0x7f0000000540)=""/85, 0x55}], 0x5, &(0x7f0000003040)=""/4096, 0x1000}, 0x6}, {{&(0x7f00000006c0)=@alg, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000740)=""/86, 0x56}, {&(0x7f00000007c0)=""/201, 0xc9}, {&(0x7f0000004040)=""/4096, 0x1000}, {&(0x7f00000008c0)=""/85, 0x55}, {&(0x7f0000000940)=""/130, 0x82}, {&(0x7f0000000a00)=""/201, 0xc9}, {&(0x7f0000000b00)=""/91, 0x5b}], 0x7, &(0x7f0000000c00)=""/152, 0x98}, 0x8}], 0x3, 0x2000, &(0x7f0000000d80)={r3, r4+30000000}) r5 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r5, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0x8da9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="0a268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 03:21:36 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:21:36 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000340)={'syzkaller1\x00', 0x3281bfa8604144d3}) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) ioctl$SIOCX25SFACILITIES(r2, 0x89e3, &(0x7f0000000000)={0x13, 0x9, 0x7, 0x6, 0x64fc, 0x81}) accept4$ax25(r0, &(0x7f00000000c0)={{0x3, @netrom}, [@netrom, @bcast, @netrom, @bcast, @rose, @remote, @default, @default]}, &(0x7f0000000140)=0x48, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) select(0x40, &(0x7f0000000180), &(0x7f00000001c0)={0x6f}, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', {0x7}}) 03:21:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5, 0xed00}]}]}}]}, 0x40}}, 0x0) 03:21:36 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:21:36 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}, 0x48) listen(r0, 0x0) unshare(0x40000000) r1 = accept(r0, 0x0, 0x0) write$nbd(r1, &(0x7f00000001c0)={0x67446698, 0x0, 0x0, 0x0, 0x0, "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"}, 0x2c5) write$binfmt_elf64(r1, 0x0, 0x0) [ 1002.947772][T11226] IPVS: ftp: loaded support on port[0] = 21 03:21:36 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:21:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5}]}]}}]}, 0x40}}, 0x0) [ 1003.263874][ T6991] tipc: TX() has been purged, node left! [ 1003.270224][ T6991] tipc: TX() has been purged, node left! [ 1003.296768][ T6991] tipc: TX() has been purged, node left! 03:21:37 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0xb00000000065808, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="294485ece7e83566f0"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendfile(r2, r1, 0x0, 0x100000001) 03:21:37 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x14}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) [ 1003.387705][T11226] IPVS: ftp: loaded support on port[0] = 21 03:21:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5, 0x1, {0x2}}]}]}}]}, 0x40}}, 0x0) 03:21:37 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x58}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:21:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x1}, 0xc) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) r2 = socket(0xa, 0x2, 0x0) r3 = socket(0xa, 0x1, 0x0) close(r3) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000680)={r5}, &(0x7f00000006c0)=0xc) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000080)={r5, 0x81, 0x10, 0x2}, &(0x7f0000000180)=0x18) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000080)={r5, 0x7}, 0x8) socket$caif_stream(0x25, 0x1, 0x3) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) 03:21:37 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xf0}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:21:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5, 0x1, {0x3}}]}]}}]}, 0x40}}, 0x0) 03:21:37 executing program 5: socket$inet(0x2, 0x5, 0xfffffffe) r0 = socket$kcm(0x10, 0x7, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000511d25a80648c63940d0424fc6004000e040a0003000200000037153e370a00098002000000d1bd", 0x33fe0}], 0x1}, 0x0) 03:21:37 executing program 2: r0 = socket(0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000200)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x0, 0x20}}, @can, @vsock={0x28, 0x0, 0x2711, @my=0x1}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000001) r4 = socket$xdp(0x2c, 0x3, 0x0) bind$rxrpc(0xffffffffffffffff, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) r5 = accept4(0xffffffffffffffff, &(0x7f0000000100)=@vsock, &(0x7f0000000040)=0x80, 0x80000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000180)=0x6, 0x4) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000880)={&(0x7f0000001000)=""/102400, 0x120933, 0x1000}, 0x20) [ 1004.219546][ T26] audit: type=1804 audit(1586748097.879:737): pid=11318 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir922123606/syzkaller.TgTSaq/737/cgroup.controllers" dev="sda1" ino=16330 res=1 03:21:40 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000cc0)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x2011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r1, 0x0) mmap(&(0x7f0000196000/0x4000)=nil, 0xc07000, 0xffffffffefffffff, 0x8032, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x40, 0x4, 0x8, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf8}, @CTA_TIMEOUT_L4PROTO={0x5}]}, 0x40}}, 0x80040) 03:21:40 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x300}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:21:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5, 0x1, {0x4}}]}]}}]}, 0x40}}, 0x0) 03:21:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="19000000000000001c000002000800050001000000000000000032000000000000000000"], 0x3c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r5, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r5, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYRES32=r2], 0x3}}, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r8}, [@IFA_CACHEINFO={0x14}, @IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x40}}, 0x0) 03:21:40 executing program 1: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x44}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@remote}, 0x14) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff0300", @ANYRES32=r9, @ANYBLOB], 0x3}}, 0x0) r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LIST(r7, &(0x7f00000007c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f0000000400)={0x220, r10, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x100, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xffff8000}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x59fbb7ad}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa705}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x599ea3f7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52c8dc9e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x210b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3c29495c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3ab7858a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1d07}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x586af89}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaa12}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2995}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x420e4b7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x22c210b2}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x738a59fc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6d4550d8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x493ddc8a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7e3f1968}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8e78}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4d3c534b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf488}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2bec42ef}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4a9a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x36d4ab1d}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x36d4dd4e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4f7252a6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x776d334b}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0xb8, 0x8, 0x0, 0x1, [{0x4}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfb}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x93}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a97142c}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6577a024}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x45}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7b745bc4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x54}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x31f1be22}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x692b9db4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb2}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7c}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x220}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x2c, r10, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 03:21:40 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x94b}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:21:40 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose, @rose, @null]}, 0x48) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose, @rose, @null]}, 0x48) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e48000037000510d25a80648c63940d0324fc60100010400a000000053582c137153e370948018000f01700d1bd", 0xfd99}], 0x1, 0x0, 0x0, 0x60000000}, 0x10) listen(r1, 0xfffffffe) accept(r1, 0x0, 0x0) getsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f0000000300)=0x101, &(0x7f0000000340)=0x4) listen(r0, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40100}, 0x4004000) r4 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000140)={{}, [@bcast, @rose, @rose, @null, @default, @default, @remote, @null]}, &(0x7f00000001c0)=0x48, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000480)=0x3, 0x4) r6 = accept$netrom(r4, &(0x7f0000000080)={{0x3, @default}, [@remote, @null, @remote, @rose, @null, @remote, @netrom, @default]}, &(0x7f0000000100)=0x48) r7 = accept4(r6, &(0x7f0000000200)=@nl=@proc, &(0x7f0000000280)=0x80, 0x800) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r7, 0x8983, &(0x7f00000002c0)={0x8, 'caif0\x00', {'bond0\x00'}, 0x3}) 03:21:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5, 0x1, {0x5}}]}]}}]}, 0x40}}, 0x0) 03:21:40 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1400}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) [ 1006.866105][T11358] validate_nla: 4 callbacks suppressed [ 1006.866115][T11358] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:21:40 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f00000000c0)=[0x0, 0x4], 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000025000535d25a80648c63940d0224fc60100003400a600200053582c137153e370a00018003001700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000001480)=@rc={0x1f, @fixed}, &(0x7f0000001500)=0x80) r2 = socket(0xa, 0x2, 0x0) r3 = socket(0xa, 0x1, 0x0) close(r3) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x30, r7, 0x5, 0x0, 0x0, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x9}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xd97}]}, 0x30}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x5c, r7, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2f}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x10000, 0x1, 0xffffffff]}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x7, 0x1000, 0x2, 0x40]}, @SEG6_ATTR_DST={0x14, 0x1, @remote}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000680)={r5}, &(0x7f00000006c0)=0xc) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000080)={r5, 0x81, 0x10, 0x2}, &(0x7f0000000180)=0x18) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000001540)=@assoc_value={r5, 0xad50}, 0x8) 03:21:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5, 0x1, {0x6}}]}]}}]}, 0x40}}, 0x0) [ 1006.959657][T11358] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 1006.979080][T11355] netlink: 'syz-executor.2': attribute type 27 has an invalid length. 03:21:40 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3f00}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) [ 1007.077750][T11358] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1007.100047][T11358] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 1007.110584][T11372] netlink: 'syz-executor.2': attribute type 27 has an invalid length. 03:21:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x2c, 0x803, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000002600)='batadv\x00') r5 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r5, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r5, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) ioctl$sock_TIOCINQ(r5, 0x541b, &(0x7f00000002c0)) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB=';', @ANYRES16=r4, @ANYBLOB="eba700000000000000000a00000008000300", @ANYRES32], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="3000ee49d716ac1b6be112d6f4390000", @ANYRES16=r4, @ANYBLOB="040025bd7000fedbdf25110000000a000900aaaaaaaaaabb000005003800000000000500290001000000"], 0x30}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000000) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000db8a1e3fb4590000000095f8513850a70634934269da49836560521e0c0771cecbcd69500787086fa9ff96a1c3e8d12c77c69add7173b06a926f9b3f0eb00ed50503f15c26a969629362b9e7afb21d7632994861adfaea723990732dbf002f6a9d56b76fc5bc63952c5c13accc9d42fdf3dc435e3c5384bd7c31139c0c425cb2a5ba6a303af55c2ef4d84c771e40515157dbc21c1bbe3a6a5d2cec2cf26b5f48a35261b1b347ca28414cb4d07b9d4d73c86156a2644703e81ea8b0cba88467f3b5464f514bcaccece284a9d97e88d630d5725b2ed2f2ce64e7df33df144508ff639a57afa83b"], 0x5}}, 0x0) r7 = socket(0x10, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0x2) write(0xffffffffffffffff, &(0x7f0000000540)="240000001a005f0014f9e4c15b0700090400020000ef00000000000e000008001b00060000005543dcca8b51dbf438df10fce231c0733881c93c01d8d272bbb3c7b0391c6165a5ad42e9721b2a207413f8cb0eca312add646f516d454896cc90ef492c1cca477a0dbfc2b05555c5c358dc2dc21dfa2477df984df50b757f20a937f925530e658f991bd9dea884a3970f6b57b3c3c2a7341726a6bddc0b7f4f1b9c260341c83f887c753a3a8ca95e3018f6120dab24b45a6ee926df106c508b4e1d810f006c954e638f88d7", 0xcb) getpeername$l2tp(r7, &(0x7f0000000300)={0x2, 0x0, @loopback}, 0xfffffffffffffffd) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x807, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 03:21:40 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x4b09}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) [ 1007.290595][T11384] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 03:21:41 executing program 2: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xd0, 0x0, 0x9, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFCTH_TUPLE={0x64, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8000000}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x8337}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x12}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x9}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4004001}, 0x4044882) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x40080) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000080000000280012000c000100766574680000000018000200fd0001000000001723c0306500000000cb892ef8051404bde5bf29190c566a03d724f7ead1ef33adfdbe08b8c523e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xb, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x58}}, 0x0) 03:21:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5, 0x1, {0x8}}]}]}}]}, 0x40}}, 0x0) [ 1007.365723][T11391] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 03:21:41 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x5800}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:21:41 executing program 1: unshare(0x6040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000000)) [ 1007.450512][T11394] netlink: 'syz-executor.2': attribute type 27 has an invalid length. 03:21:41 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x43732e5398416f1a}) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) setsockopt$ax25_int(r2, 0x101, 0x1, &(0x7f0000000200)=0xff, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'\x00', 0x400}) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) accept4$rose(r4, 0x0, &(0x7f0000000140)=0xfffffdb4, 0x180800) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6}]}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'sit0\x00', 0x200}) [ 1007.619662][T11394] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1007.668413][T11413] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 03:21:41 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xf000}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:21:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5, 0x1, {0x9}}]}]}}]}, 0x40}}, 0x0) [ 1007.928328][T11397] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 03:21:42 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x34000}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:21:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5, 0x1, {0xa}}]}]}}]}, 0x40}}, 0x0) 03:21:42 executing program 2: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) connect(r0, &(0x7f0000000140)=@ipx={0x4, 0x200, 0x7, "8480ae734a46"}, 0x80) r1 = socket(0x4000000000010, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0xffffffffffffff71, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_getnetconf={0x14, 0x52, 0x101}, 0x14}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="4800000010000507800000f70000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000c000100766574680000000018000a00fd0001000000000023c0e5bf29be5ed702f9fe6e3ce28db8712e0f8c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259fba61afe472b5a577383c1397c30af8fdf84de5f57e6d4bd0577298132199601006ee56e877ff533f7cfaf5ce0dbd3a96d14eefe46636fd0fcbbe8d419d6e4", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0x2) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r5 = socket$kcm(0x10, 0x2, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x68, r6, 0x8b8e0eb13081c495, 0x0, 0x0, {{}, {0x0, 0x4109}, {0x4c, 0x18, {0x60, @media='ib\x00'}}}}, 0x68}}, 0x0) recvmmsg(r1, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) getsockopt$PNPIPE_INITSTATE(r7, 0x113, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 03:21:42 executing program 1: syz_emit_ethernet(0x7c, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @gre={{0xa, 0x4, 0x0, 0x0, 0x6e, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0xc, 0x5, 0x1, 0x0, [{@empty}]}, @timestamp={0x7, 0x8, 0x4, 0x0, 0x0, [0x0]}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x0, [0xb458]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x7ff}}}}}}}}, 0x0) 03:21:42 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x400300}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:21:42 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000040)=0x3, 0x4) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa8, 0x2, 0x2, 0x801, 0x0, 0x0, {0xc, 0x0, 0x2}, [@CTA_EXPECT_TUPLE={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x4}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @dev={0xfe, 0x80, [], 0x3d}}}}]}, @CTA_EXPECT_MASK={0x1c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'tftp-20000\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7}]}, 0xa8}, 0x1, 0x0, 0x0, 0x811}, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @remote}}, 0x1c) close(r0) 03:21:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xa) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8035}]}, 0x24}}, 0x0) 03:21:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5, 0x1, {0xb}}]}]}}]}, 0x40}}, 0x0) 03:21:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0, 0x1}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000540)={r7}, &(0x7f0000000580)=0x8) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r8, @ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="70000000280088f27184310f002819144485084e6b461f80b4cac4142e42cf3d82445592545e58f7560b457c7c2dc019e4da3f17", @ANYRES32=r8, @ANYBLOB="000900000000ffff000000000b0001006367726f75700000400002003c00010038000000070001007874000028000280240001006d616e676c65000000000000000000000000000000000000000000000000000004000600"], 0x70}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl(r9, 0x1000008912, &(0x7f0000000040)="080db5055e0bcfe847a071") sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2400000011000100"/20, @ANYRES32=r8, @ANYBLOB="000000f616b7e3dce0032e00"], 0x24}}, 0x0) 03:21:42 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xf0ffff}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:21:42 executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x300, 0x8, 0x3, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x88, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0xca}]}}}]}, 0x3c}}, 0x0) 03:21:42 executing program 1: socket(0x0, 0xa, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0b") r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) socket(0x11, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x2, 0x3000300}], 0x1, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f000000ab80)={0x0, 0xfffffffffffffd57, 0x0}, 0x40000) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0xfffffffd, 0x0, 0x101}, 0x10) sendmmsg(r1, &(0x7f0000008c80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000440)=@tipc, 0x80, 0x0}}], 0x2, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r2 = socket(0x11, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="080d055e0bfa00a2bbe822835be25159d4fe978e52d8dd3056a528b2ff0eb6d380f78c2f3ce079feeea7310b3acc952cd1af781abbf9f7bed8244bd2d319d741f0cf5ffd0e73305de2d1562033de64ecd72f5f315502fd8a541b5c3d8ee4900513174540f851f1793ea8d2d04297bdfb4902fb6c3356916b0fb1045769f03457c379d5a1f1533ef96450a5acb466103952d7fbe64452f70321019a415428653590a691480187287e") syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) 03:21:42 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1000000}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) [ 1009.297543][T11488] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 03:21:43 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2000000}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:21:43 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x2c}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x2, 0x1, 0x0, 0x34000}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}], {0x14}}, 0x94}}, 0x0) 03:21:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5, 0x1, {0xc}}]}]}}]}, 0x40}}, 0x0) 03:21:43 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3000000}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:21:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5, 0x1, {0xe}}]}]}}]}, 0x40}}, 0x0) 03:21:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000000)={0x0, 0xfff, 0x1, [0x6]}, &(0x7f0000000040)=0xa) r4 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r4, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r4, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) r5 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r5, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r5, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) r6 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r6, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r6, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f0000000180)=ANY=[@ANYBLOB="0600000000000000dc000000000000000400000000000000", @ANYRES32=r5, @ANYBLOB="00000000ff0300"/28, @ANYRES32=r0, @ANYBLOB="000000000300"/28, @ANYRES32=r1, @ANYBLOB="00000000000200"/28, @ANYRES32=r6, @ANYBLOB="00000000ea09000000000000000000000000000000000000000058e0"]) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000100)={r3, 0x4}, 0x8) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000240)=0x1ff) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000005000000", 0x58}], 0x1) 03:21:43 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x4000000}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:21:43 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) r4 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r4, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r4, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000000180)=@req={0x28, &(0x7f0000000100)={'team_slave_0\x00', @ifru_data=&(0x7f0000000080)="f732310e285ce5cc1a311c7f05b86bb02c881404fffcf1ad913baa10c1d797d8"}}) accept4$rose(r3, &(0x7f0000000000)=@short={0xb, @remote, @remote, 0x1, @default}, &(0x7f0000000040)=0x1c, 0x180800) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) sendmsg$NFNL_MSG_CTHELPER_GET(r5, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x4c, 0x1, 0x9, 0x301, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x1}, @NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 03:21:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f000000}, [@call={0x4f, 0x10}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) 03:21:43 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x14000000}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:21:43 executing program 1: socket(0x0, 0xa, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0b") r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) socket(0x11, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x2, 0x3000300}], 0x1, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f000000ab80)={0x0, 0xfffffffffffffd57, 0x0}, 0x40000) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0xfffffffd, 0x0, 0x101}, 0x10) sendmmsg(r1, &(0x7f0000008c80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000440)=@tipc, 0x80, 0x0}}], 0x2, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r2 = socket(0x11, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="080d055e0bfa00a2bbe822835be25159d4fe978e52d8dd3056a528b2ff0eb6d380f78c2f3ce079feeea7310b3acc952cd1af781abbf9f7bed8244bd2d319d741f0cf5ffd0e73305de2d1562033de64ecd72f5f315502fd8a541b5c3d8ee4900513174540f851f1793ea8d2d04297bdfb4902fb6c3356916b0fb1045769f03457c379d5a1f1533ef96450a5acb466103952d7fbe64452f70321019a415428653590a691480187287e") syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) 03:21:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5, 0x1, {0xf}}]}]}}]}, 0x40}}, 0x0) 03:21:43 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000180)={{0x2, 0x4e22, @loopback}, {0x1, @remote}, 0x3a, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'ip_vti0\x00'}) writev(r0, &(0x7f0000000300)=[{&(0x7f0000002040)="6e4302cb7e0799104efe9ed3f718", 0xe}, {&(0x7f00000020c0)='\b', 0x1}, {&(0x7f0000000140)='\x00\b\x00', 0x3}, {&(0x7f0000000080)="67d310f90825310cb6c635ab9b169b1fa9c0b1f2", 0x14}], 0x4) 03:21:43 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3f000000}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:21:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5, 0x1, {0x10}}]}]}}]}, 0x40}}, 0x0) 03:21:44 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x4b090000}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:21:44 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) socket$inet(0x2, 0x3, 0x2) r0 = socket$inet(0x2, 0x6, 0x0) ioctl$sock_ifreq(r0, 0x8923, &(0x7f0000000180)={'tunl0\x00', @ifru_hwaddr=@link_local}) [ 1010.964934][T11606] IPVS: ftp: loaded support on port[0] = 21 03:21:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5, 0x1, {0x11}}]}]}}]}, 0x40}}, 0x0) 03:21:45 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x58000000}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) [ 1011.731392][T11607] IPVS: ftp: loaded support on port[0] = 21 03:21:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5, 0x1, {0x12}}]}]}}]}, 0x40}}, 0x0) 03:21:45 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x9effffff}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) [ 1012.011297][T11590] validate_nla: 17 callbacks suppressed [ 1012.011306][T11590] netlink: 'syz-executor.2': attribute type 27 has an invalid length. 03:21:46 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000001cc0)="080db5055e0bcfe847a071") bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r2 = socket(0x10, 0x4, 0x0) write(r2, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)={r0}) r4 = socket(0xa, 0x2, 0x0) r5 = socket(0xa, 0x1, 0x0) close(r5) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000680)={r7}, &(0x7f00000006c0)=0xc) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r8, 0x28, 0x6, &(0x7f0000000140)={0x0, 0x7530}, 0x10) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000080)={r7, 0x81, 0x10, 0x2}, &(0x7f0000000180)=0x18) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000080)={r7, @in={{0x2, 0x4e24, @rand_addr=0x4}}}, 0x84) listen(r0, 0x1) syz_emit_ethernet(0x29e, &(0x7f0000000700)={@local, @remote, @void, {@ipv6={0x86dd, @generic={0xb, 0x6, "656cc8", 0x268, 0x84, 0x4, @loopback, @initdev={0xfe, 0x88, [], 0x0, 0x0}, {[@dstopts={0xe9, 0x9, [], [@hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0x34}}, @ra={0x5, 0x2, 0x7}, @ra={0x5, 0x2, 0x800}, @calipso={0x7, 0x30, {0x4a94f323e8548372, 0xa, 0x8, 0x6, [0x2, 0x1, 0x6, 0x4, 0x8001]}}]}, @fragment={0x0, 0x0, 0x33, 0x0, 0x0, 0x14, 0x64}, @srh={0x29, 0xe, 0x4, 0x7, 0x1f, 0x40, 0x397, [@dev={0xfe, 0x80, [], 0xb}, @rand_addr="a452a858f0840e36030488f670a54b07", @rand_addr="7403e2f96fb6a7b0ac88cb58fb315864", @rand_addr="1163b4ac8bdfc62053ed45ee65940bf7", @mcast2, @mcast2, @local]}, @fragment={0x32, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x64}, @routing={0x8, 0x10, 0x1, 0x3f, 0x0, [@local, @empty, @mcast2, @remote, @local, @local, @remote, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}, @dstopts={0x0, 0xf, [], [@jumbo={0xc2, 0x4, 0x1}, @calipso={0x7, 0x30, {0x0, 0xa, 0x81, 0x8, [0x2, 0x3, 0x5, 0x2, 0xffffffffffffc2f4]}}, @jumbo={0xc2, 0x4, 0xfff}, @hao={0xc9, 0x10, @local}, @jumbo={0xc2, 0x4, 0x3}, @calipso={0x7, 0x20, {0x2, 0x6, 0x4, 0x9, [0xff, 0xfffffffffffffffb, 0x40]}}]}], "42713b39466da11e1c980c3c64ffdc06d1d840dce1ad480a1602a697049179b874ce2a77995952a804ce4e5ad68c25814f194afe0ba70a807262c98ac6029166b1f3a8269fb96170a11ffcca406e71dadbff1a726df3edc5cf098f209200eb41b19e3e8a6663fa46244f84f0c4bb79a13ce24c7ccebc0e946c10bb01d8c93da4"}}}}}, 0x0) [ 1012.778419][T11668] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 03:21:46 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xf0ffffff}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:21:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5, 0x1, {0x13}}]}]}}]}, 0x40}}, 0x0) 03:21:47 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$isdn_base(0x22, 0x3, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000180)=0x9, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0x6) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'bond_slave_1\x00', &(0x7f00000001c0)=@ethtool_eee={0x45, 0x1, 0x2, 0x2, 0x2, 0x6, 0x6, 0x40, [0x5, 0xffff0000]}}) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0xac14140d}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) recvfrom(r0, &(0x7f0000000100)=""/94, 0xffffffffffffff5e, 0x10100, 0x0, 0x0) 03:21:47 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffff000}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:21:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5, 0x1, {0x14}}]}]}}]}, 0x40}}, 0x0) 03:21:47 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xffffff7f}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:21:50 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xffffff9e}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:21:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5, 0x1, {0x60}}]}]}}]}, 0x40}}, 0x0) 03:21:50 executing program 2: socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) pipe(&(0x7f0000000100)) socket(0x10, 0x803, 0x0) socket$inet(0x10, 0x2, 0x0) socket(0x10, 0x80002, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$ax25(0x3, 0x5, 0x0) pipe(&(0x7f0000000100)) socket$nl_audit(0x10, 0x3, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x74, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x203}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xb}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x80000000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x74}}, 0x0) 03:21:50 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000140)={0x0, {{0xa, 0x4e21, 0x0, @mcast2, 0xfffffffc}}, {{0xa, 0x0, 0x0, @local, 0x3}}}, 0x108) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) r2 = gettid() r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_delrule={0x28, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc, 0x14, {0x0, r5}}]}, 0x28}}, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4009}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETGROUP(r7, 0x400454ce, r8) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000280)={0x14, 0x14, 0x100, 0x70bd2b, 0x25dfdbfc, "", [@nested={0x4, 0x42}]}, 0x14}, {&(0x7f0000000380)=ANY=[@ANYBLOB="640200003600000125bd7000fddbdf2547005380f0aac24e328257c5e69ac5132c7a9378570ca07a8869c2bd722549db4016eb9e884fd89899fb68ff7edcbdca22713f9ad7e97b662e51ea599f156608008a00", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="080076000200000014004900dd0037069b8f0e53bfbe6a0ad0f7e70b"], 0x5}, {&(0x7f0000000880)={0x1f4, 0x40, 0x200, 0x70bd2b, 0x25dfdbfe, "", [@nested={0xc1, 0xc, 0x0, 0x1, [@generic="76297082f7e447a73577ce0efa54a344fe36f5870081ebb54afaba9d6ad446301f49bdf3083bbfd527dd4d048e735207283f98fbb3881f5ead027ff7d3ec8c2da260dd8054766fd8ed04c6bd46ac102c1f520b6e20a9d93057c3ca074566b03055e9c2d7ef3f6fe4155c", @typed={0x8, 0x63, 0x0, 0x0, @fd}]}, @generic="6cab753f184bd43b5046fe40597740db8213132d97823884ff852d25de8749a3a0452e59863949306ea55e2f1df532fff7a777667961b3b1f727ad25366f4d6c6a39f1f41e36b800ff53d5f7bedb646816e062a1d9bbb1a2e3c592996598ac4a9b8ea66c4f6b6edf59eaabead3d4a6fc1ac40b92107eaf14ce4d8a75f478e0c2f760329ea5384f61b7359b040da8a163e459003ad055c7a2e626f75eb75dd3628fefe7af60ba464240ed2085a3b9606e6b0ffff3d57c8eaaeaf5c1221f0244ee4ebae1c122c89d31b9d72a204501c5f75245e2c46d9ccd10419931d7a77de8", @generic="600f5aada85a308d973600bd66cba4de155f4a265e38a338242aeebff5dea13a0f324f05713d1e0b16d05bcb428341c75efc27be69f6e911699668b46f6d4c995f145a9584c316edf92111f08d2962aee4a419ed9dac30d12083b30da0f3606e496c4c14496725453b92f250e481b950232723ded8433079cb2ba3ec0509cda5", @nested={0xc, 0x6f, 0x0, 0x1, [@typed={0x8, 0x55, 0x0, 0x0, @fd}]}]}, 0x1f4}, {&(0x7f0000001400)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES16, @ANYRES32=0x0, @ANYBLOB], 0x5}, {&(0x7f0000001540)={0x3b8, 0x27, 0x400, 0x70bd2a, 0x25dfdbfd, "", [@typed={0xc, 0x64, 0x0, 0x0, @u64=0xffffffff}, @typed={0x14, 0x24, 0x0, 0x0, @ipv6=@local}, @nested={0x1cc, 0x61, 0x0, 0x1, [@generic="c76f5f69534e02e586088aa40079bc5e71ac32acfe6940a80c605ced96bfb0db68a51a8362f152a3f33ecdafb7a990918187461f83d48119399bfaa9d0ff8728b9cd1e947c82fa2015f4599b24f607d87d3c096928c0d8939849b4ee05bb8a892b7425d1ea7337fe1332edaa8ed62942ff93107693fae5dcdac52b96a72ac1b363468427a60aa686c65b512077b5ca253574c3b1108e183ffe7b72dc911f29a96e13841b69610df9e05f45939f951605", @generic="bdd7afcbe22c9081357b590d958202e03563cfaa9cdad948fc07883e8cd86c7d4614e30873ad2862da131fc1856f1b3476313466b17330687416838f2067f3caed3f590ad59d2c707e446eb5cd803f509ecad2652beb981490cc2a8daa7c3a0cc8baa64d73ac4255c2dab392d7c7ab9187998761ea403c48285964033df7f0e80832b5e6abea72a22b10aa125719b0e3849f79890bb73a618aceab3a4fd1146ac0646ea594d3253738b42250b2bec608c505dd19f387ff453a85ed23460267960988bd03e5457ef7e0d21ab1277f7a77a343b6bad04ed6dc3297a4653be7edeaf126ba0285386ed63472b87f2a27c9ef8eb434c635", @generic="5f5f38aaa5f6d19f78f0a5d1f04f46ef4ca310605d83009c10cbbb11ebca2656f51b8a"]}, @typed={0x12, 0x33, 0x0, 0x0, @str='\xb0\xd4/et\x00\x04\xbeV,\x7f\xf5\xd0H'}, @nested={0xa0, 0x4e, 0x0, 0x1, [@typed={0x4, 0x50}, @generic="f1ad22b510fc670edcebd5f47349ec18262a1eaf3961858e05d2c5532e386f552288896e6b8876d9b9c7d18e53a26f64cfef97162a07f589e9d215513a659d42da3e46a403694957db64745c02bf317dbe0e67542c9c5eca37b17080c25ef172072f45862554e4ecdcfa36c98beb1deaf8fada60f624122daf8a62ac32afc69afb77c4cff46c497fad321fcc1e080681677420db187a910a"]}, @generic="3132184f8cc75e7ee7bd291be9c2d61a1ca389eb27a4e5233df07e23cc535ff093772f0bb197ebb1f5bcfd1fdc3dbf1bc4cc012d7d893140727db0456c21fc385fca698b9113f9d970b1ce0cb53f4455dffeccaa3e363c65aa98027ccfe2c45559281d15f8f660", @generic="4a3acf68cf7a9024fbc057bf90e9456415652962cce0c6332c0933925d61c460a225944bc34a6ce58756ee3be19bf1eaef3c56f2f5466d5ca329fa6cb4577773cd5888e2d27ab53b0dada471909b7dd92406f21fd93dcbf937645bdb006ff220a4eb4447486df0780c8f9130c6629c0d4640fe73c17cd3261dade1864a69c63d3e5a9cb9c5e3924b397500d0862ecdd44e586d6f9d3273c6e6d519b4ae3db1c9"]}, 0x3b8}], 0x5, &(0x7f00000012c0)=ANY=[], 0x0, 0x1000}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x1, &(0x7f0000000040)=ANY=[@ANYRESDEC=r2], 0x0) 03:21:50 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x2) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x1, 0x0, 0x4}}, 0xe8) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) getpeername(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000080)=0x80) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4080}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000d3a827eed4a72a9f5e16245d257c0c15f9233f9c6802b2c98161b5bff64efce7c32674b75b51d2519c2391c2", @ANYRES16=r4, @ANYBLOB="040029bd7000fbdbdf250100000014000500ff010000000000000000000000000001"], 0x28}, 0x1, 0x0, 0x0, 0x850}, 0x8000c40) sendmsg$NLBL_MGMT_C_LISTALL(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r4, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, [], 0x25}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4008004) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) 03:21:50 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000640)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="280000005a93c44745ad64b42a5f3881ef66f1127c7bcccf57429c83276969cc2c3ba320ef2906d5ad118000c3fb4104ebed4f35ee046626f62246f85d06f32989ff90202d3345a426c717eb7266a6871e7a3908059c556ed4e1ebbe11f6e9418f3d752bd513c71d3e38c5674fc7f9b86ed5e90e09b3f946a3871f293180d9ad9c17b2cb41c00d5684fa986e5775d4c35152f8d5db3ca1d7e7f6f39e83225d8c3d45ec107fd31eb2dadab762ca8d7581104480ef6680b0b02a36c5e9326f446c78c40385c9ce5f", @ANYRES16=r3, @ANYBLOB="01002cbd7000ffdbdf2507000000140008006d616373656330000000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20004004}, 0x20008041) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x1, @loopback, 0x101}, {0xa, 0x4e24, 0x2, @rand_addr="f896fdad18d6aaf8dc2bed09aaf71f6a", 0x1}, 0x1, [0x5, 0xe1d, 0x8, 0x4, 0x8000, 0x9, 0x1, 0x7fff]}, 0x5c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) connect$vsock_stream(r0, &(0x7f0000000280)={0x28, 0x0, 0x0, @hyper}, 0x10) unshare(0x40000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000009000000240004800c000780080005ffffffff001300010062726f6164636173742d6c696e6b0000"], 0x38}}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f00000005c0)={&(0x7f0000000240), 0xc, &(0x7f0000000580)={&(0x7f0000000380)={0x1f8, r5, 0x8, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x72c42fdd}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xdc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2f72}]}, @TIPC_NLA_LINK={0xd0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x47}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x29}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x20000080}, 0xc088) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000100)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(r6, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x8c, r7, 0x8, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'geneve1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_bond\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4008885}, 0xc013) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000200), 0x8) [ 1016.515945][T11734] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 03:21:50 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffff0}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) [ 1016.573937][ T6991] tipc: TX() has been purged, node left! [ 1016.582520][ T6991] tipc: TX() has been purged, node left! [ 1016.636824][T11738] team0: Device vlan3 is already an upper device of the team interface [ 1016.710670][T11744] IPVS: ftp: loaded support on port[0] = 21 [ 1016.897965][T11734] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 03:21:50 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xffffffff}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 03:21:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5, 0x1, {0xf0}}]}]}}]}, 0x40}}, 0x0) 03:21:50 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9fab0100180000000000000010000000100000000200000000006bd43d3f505b83549262b00000000200c183f1ff1bde50b06899a8ba43d0ba8bb326bb1438bc9b57ba9eb3126b798cc5320d9d55f5fb3ea5f3c56c964c858106eebbcf4923"], &(0x7f0000000340)=""/142, 0x2a, 0x8e, 0x8}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="2d85df60c64516382d242e30da613e160098ec76e03c9e3c"], 0x18}, 0x1, 0x0, 0x0, 0x50}, 0x40800) 03:21:51 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x3, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) [ 1017.393816][T11769] IPVS: ftp: loaded support on port[0] = 21 [ 1017.429672][T11796] BPF:Invalid magic [ 1017.469844][T11796] BPF:Invalid magic 03:21:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5, 0x1, {0x140}}]}]}}]}, 0x40}}, 0x0) 03:21:51 executing program 2: socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f00000003c0)=ANY=[@ANYPTR64=&(0x7f0000000400)=ANY=[@ANYRESDEC, @ANYRES32, @ANYRESOCT, @ANYRES32]], 0x8) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e24, 0x0, @local, 0xfff}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000240)={r6, @in, 0x0, 0xfffd, 0x0, 0x0, 0x300}, 0x9c) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000600)={r6, 0x618, 0x7f}, 0x8) r7 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r7, 0x0, 0x1420000a77, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000640)=0x5, 0x4) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000004cc0)={&(0x7f0000004b80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000004c80)={&(0x7f0000002080)=ANY=[@ANYBLOB="6400000038fd80be67de05a46488f439cb7b9fdcd8800f5fd73aa5ffac21c922fddb703f9ec1f58062e6f3cd00e5cd0f37dc1bfec4b1188008c4b6f1f574fe43dc56c45a5288987d1d1087d69ff5ee841820595ea35eb5449782b74251def2", @ANYRES16=0x0, @ANYBLOB="000404000000fbdbdf2506000000500001803c00028008000300070000000800030005000000080003000100010008000200030000000800020006000000080002000300000008000200130000000d0001007564703a73797a3000000000"], 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4) sendmsg$NFT_MSG_GETGEN(r8, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000020}, 0xc, &(0x7f0000000580)={&(0x7f00000001c0)={0x14, 0x10, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x4}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f00000032c0)=ANY=[@ANYRES32=r8, @ANYBLOB="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"]) recvfrom(r1, &(0x7f0000000040)=""/184, 0xfffffffffffffe07, 0x0, 0x0, 0xfffffe53) recvmmsg(0xffffffffffffffff, &(0x7f0000002d80)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000140)=""/11, 0xb}, {&(0x7f0000000680)}, {&(0x7f00000006c0)=""/80, 0x50}, {&(0x7f0000000740)=""/60, 0x3c}, {&(0x7f0000000780)=""/107, 0x6b}, {&(0x7f0000000800)=""/133, 0x85}, {&(0x7f00000008c0)=""/119, 0x77}, {&(0x7f0000000940)=""/203, 0xcb}, {&(0x7f0000000a40)=""/238, 0xee}], 0x9, &(0x7f0000000c00)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000001c00)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000001d80)=[{&(0x7f0000001c80)=""/204, 0xcc}], 0x1, &(0x7f0000001dc0)=""/67, 0x43}, 0x9}, {{&(0x7f0000001e40)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000002040)=[{&(0x7f0000001ec0)=""/222, 0xde}, {&(0x7f0000001fc0)=""/85, 0x55}], 0x2, &(0x7f0000003040)=""/197, 0xc5}, 0x4}, {{&(0x7f0000002180)=@alg, 0x80, &(0x7f0000002240)=[{&(0x7f0000002200)=""/64, 0x40}], 0x1}, 0xb77b}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000002280)}], 0x1, &(0x7f0000002300)=""/55, 0x37}, 0x4}, {{0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000002340)=""/207, 0xcf}, {&(0x7f0000002440)=""/188, 0xbc}, {&(0x7f0000002500)=""/162, 0xa2}], 0x3, &(0x7f0000002600)=""/19, 0x13}, 0xbc}, {{&(0x7f0000002640)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000002b00)=[{&(0x7f00000026c0)=""/3, 0x3}, {&(0x7f0000002700)=""/174, 0xae}, {&(0x7f00000027c0)=""/216, 0xd8}, {&(0x7f00000028c0)=""/109, 0x6d}, {&(0x7f0000002940)=""/166, 0xa6}, {&(0x7f0000002a00)=""/177, 0xb1}, {&(0x7f0000002ac0)=""/12, 0xc}], 0x7, &(0x7f0000002b80)=""/62, 0x3e}, 0x7}, {{&(0x7f0000002bc0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000002c40), 0x0, &(0x7f0000002c80)=""/199, 0xc7}, 0x3}], 0x8, 0x41, &(0x7f0000002f80)={0x0, 0x1c9c380}) getsockopt$inet_sctp6_SCTP_MAXSEG(r9, 0x84, 0xd, &(0x7f0000002fc0)=@assoc_value={r6, 0x2}, &(0x7f0000003000)=0x8) recvmmsg(r1, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 1017.557255][T11810] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 03:21:51 executing program 4: close(0xffffffffffffffff) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) recvfrom$inet(r1, &(0x7f0000000080)=""/35, 0x23, 0x2, &(0x7f00000001c0)={0x2, 0x4e23, @remote}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) writev(r0, &(0x7f0000002980)=[{&(0x7f0000001600)="d083b8778d9e055daedb2fb28df629afabdb0b25311ef1e77295a000a43e2610b846a5a59c06a800d3d76df145cad9aaddefb439dffeeefe701249890b0ea7339ca9794b6cf290548aba931a5059dedce4d27e6263d686d6f1504ecfc3bdccec85c073b5b71f298737ae4c7e96b8d6df30992b9ebb633ddeb1f6056cee4ccb0d9a1ede01060515292db70380408c1cf148566149f1402c4fd539424b1901b3d8c9", 0xa1}, {&(0x7f0000001880)="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", 0x26c}], 0x2) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xfff, 0x4) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) sendto$inet(r2, &(0x7f0000000140)="0a268a927f1f6588b967aced1fc978609dd9000000000000974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf9011a7511bf746bec66ba", 0x4d, 0x15, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000000)=""/62, 0x3e, 0x40000020, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) 03:21:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f00000010c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) close(r1) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8000003}) pwrite64(r3, &(0x7f0000000200)="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", 0x4000, 0x1200) 03:21:51 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfcf, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x14, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) [ 1017.783145][T11839] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 1017.811366][T11840] ================================================================== [ 1017.819729][T11840] BUG: KASAN: double-free or invalid-free in nf_tables_newset+0x1ed6/0x2560 [ 1017.828398][T11840] [ 1017.830747][T11840] CPU: 0 PID: 11840 Comm: syz-executor.0 Not tainted 5.6.0-syzkaller #0 [ 1017.839075][T11840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1017.849133][T11840] Call Trace: [ 1017.852434][T11840] dump_stack+0x188/0x20d [ 1017.856789][T11840] print_address_description.constprop.0.cold+0xd3/0x315 [ 1017.863813][T11840] ? nf_tables_newset+0x1ed6/0x2560 [ 1017.869016][T11840] kasan_report_invalid_free+0x61/0xa0 [ 1017.874487][T11840] ? nf_tables_newset+0x1ed6/0x2560 [ 1017.879712][T11840] __kasan_slab_free+0x129/0x140 [ 1017.884664][T11840] ? nf_tables_newset+0x1ed6/0x2560 [ 1017.889874][T11840] kfree+0x109/0x2b0 [ 1017.893781][T11840] nf_tables_newset+0x1ed6/0x2560 [ 1017.898835][T11840] ? lock_downgrade+0x840/0x840 [ 1017.903695][T11840] ? nft_set_elem_expr_alloc+0x200/0x200 [ 1017.909447][T11840] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1017.915376][T11840] ? __nla_parse+0x2e/0x60 [ 1017.919817][T11840] nfnetlink_rcv_batch+0x83a/0x1610 [ 1017.925029][T11840] ? nft_set_elem_expr_alloc+0x200/0x200 [ 1017.929513][T11842] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 1017.930689][T11840] ? nfnetlink_subsys_register+0x2b0/0x2b0 [ 1017.930772][T11840] ? __nla_validate_parse+0x2af/0x1cd0 [ 1017.950161][T11840] ? cap_capable+0x1eb/0x250 [ 1017.954768][T11840] ? nla_memcpy+0xa0/0xa0 [ 1017.959112][T11840] ? ns_capable_common+0xe2/0x100 [ 1017.964144][T11840] ? __nla_parse+0x2e/0x60 [ 1017.968579][T11840] nfnetlink_rcv+0x3af/0x420 [ 1017.973185][T11840] ? nfnetlink_rcv_batch+0x1610/0x1610 [ 1017.978754][T11840] netlink_unicast+0x537/0x740 [ 1017.983537][T11840] ? netlink_attachskb+0x810/0x810 [ 1017.988659][T11840] ? _copy_from_iter_full+0x25c/0x870 [ 1017.994071][T11840] ? __phys_addr_symbol+0x2c/0x70 [ 1017.999108][T11840] ? __check_object_size+0x171/0x437 [ 1018.004411][T11840] netlink_sendmsg+0x882/0xe10 [ 1018.009191][T11840] ? aa_af_perm+0x260/0x260 [ 1018.013709][T11840] ? netlink_unicast+0x740/0x740 [ 1018.018671][T11840] ? netlink_unicast+0x740/0x740 [ 1018.023622][T11840] sock_sendmsg+0xcf/0x120 [ 1018.028050][T11840] ____sys_sendmsg+0x6bf/0x7e0 [ 1018.032824][T11840] ? kernel_sendmsg+0x50/0x50 [ 1018.037533][T11840] ___sys_sendmsg+0x100/0x170 [ 1018.042231][T11840] ? sendmsg_copy_msghdr+0x70/0x70 [ 1018.047368][T11840] ? __fget_files+0x32f/0x500 [ 1018.052058][T11840] ? ksys_dup3+0x3c0/0x3c0 [ 1018.056543][T11840] ? __fget_light+0x20e/0x270 [ 1018.061241][T11840] __sys_sendmsg+0xec/0x1b0 [ 1018.065755][T11840] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1018.070787][T11840] ? __x64_sys_futex+0x380/0x4f0 [ 1018.075751][T11840] ? trace_hardirqs_off_caller+0x55/0x230 [ 1018.081486][T11840] ? do_syscall_64+0x21/0x7d0 [ 1018.086186][T11840] do_syscall_64+0xf6/0x7d0 [ 1018.090720][T11840] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1018.096616][T11840] RIP: 0033:0x45c889 [ 1018.100520][T11840] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1018.120129][T11840] RSP: 002b:00007f756981bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1018.128549][T11840] RAX: ffffffffffffffda RBX: 00007f756981c6d4 RCX: 000000000045c889 [ 1018.136529][T11840] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 1018.144508][T11840] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1018.152485][T11840] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1018.160462][T11840] R13: 000000000000095b R14: 00000000004cc129 R15: 000000000076bf0c [ 1018.168451][T11840] [ 1018.170784][T11840] Allocated by task 11840: [ 1018.175205][T11840] save_stack+0x1b/0x40 [ 1018.179366][T11840] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 1018.185026][T11840] __kmalloc_track_caller+0x159/0x7a0 [ 1018.190406][T11840] kvasprintf+0xb5/0x150 [ 1018.194654][T11840] kasprintf+0xbb/0xf0 [ 1018.198741][T11840] nf_tables_newset+0x1543/0x2560 [ 1018.203775][T11840] nfnetlink_rcv_batch+0x83a/0x1610 [ 1018.208980][T11840] nfnetlink_rcv+0x3af/0x420 [ 1018.213579][T11840] netlink_unicast+0x537/0x740 [ 1018.218363][T11840] netlink_sendmsg+0x882/0xe10 [ 1018.223152][T11840] sock_sendmsg+0xcf/0x120 [ 1018.227572][T11840] ____sys_sendmsg+0x6bf/0x7e0 03:21:51 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x801, 0x0, 0x0, {0x7, 0x0, 0x6}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4084) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0xf915ec8762bad1cd, 0x0, 0x0, {}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6}]}, 0x1c}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) recvfrom$netrom(r6, &(0x7f0000000380)=""/103, 0x67, 0x12103, &(0x7f0000000440)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48) getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x4, r7, {}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffe0}]}}]}, 0x38}, 0x1, 0x1400}, 0x0) write(0xffffffffffffffff, &(0x7f0000000280)="240000001a005f0014f9e407000904000200000000000000000e000008001b0006000000", 0x24) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000580)={r8, 0x4}) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r3, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc}]}, @NFT_MSG_NEWSETELEM={0x14}], {0x14}}, 0x88}}, 0x0) [ 1018.232339][T11840] ___sys_sendmsg+0x100/0x170 [ 1018.237052][T11840] __sys_sendmsg+0xec/0x1b0 [ 1018.241561][T11840] do_syscall_64+0xf6/0x7d0 [ 1018.246102][T11840] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1018.251987][T11840] [ 1018.254321][T11840] Freed by task 11840: [ 1018.258390][T11840] save_stack+0x1b/0x40 [ 1018.262542][T11840] __kasan_slab_free+0xf7/0x140 [ 1018.267388][T11840] kfree+0x109/0x2b0 [ 1018.271292][T11840] nf_tables_newset+0x1f73/0x2560 [ 1018.276325][T11840] nfnetlink_rcv_batch+0x83a/0x1610 [ 1018.281521][T11840] nfnetlink_rcv+0x3af/0x420 [ 1018.286112][T11840] netlink_unicast+0x537/0x740 [ 1018.290870][T11840] netlink_sendmsg+0x882/0xe10 [ 1018.295629][T11840] sock_sendmsg+0xcf/0x120 [ 1018.300035][T11840] ____sys_sendmsg+0x6bf/0x7e0 [ 1018.304793][T11840] ___sys_sendmsg+0x100/0x170 [ 1018.309465][T11840] __sys_sendmsg+0xec/0x1b0 [ 1018.313961][T11840] do_syscall_64+0xf6/0x7d0 [ 1018.318458][T11840] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1018.324331][T11840] [ 1018.326655][T11840] The buggy address belongs to the object at ffff888067f24a00 [ 1018.326655][T11840] which belongs to the cache kmalloc-32 of size 32 [ 1018.340525][T11840] The buggy address is located 0 bytes inside of [ 1018.340525][T11840] 32-byte region [ffff888067f24a00, ffff888067f24a20) [ 1018.353521][T11840] The buggy address belongs to the page: [ 1018.359162][T11840] page:ffffea00019fc900 refcount:1 mapcount:0 mapping:00000000059f4c2b index:0xffff888067f24fc1 [ 1018.369559][T11840] flags: 0xfffe0000000200(slab) [ 1018.374416][T11840] raw: 00fffe0000000200 ffffea0002537e08 ffffea00015b6ec8 ffff8880aa0001c0 [ 1018.383000][T11840] raw: ffff888067f24fc1 ffff888067f24000 0000000100000028 0000000000000000 [ 1018.391578][T11840] page dumped because: kasan: bad access detected [ 1018.397977][T11840] [ 1018.400294][T11840] Memory state around the buggy address: [ 1018.405917][T11840] ffff888067f24900: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 1018.413969][T11840] ffff888067f24980: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 1018.422024][T11840] >ffff888067f24a00: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 1018.430070][T11840] ^ [ 1018.434132][T11840] ffff888067f24a80: 05 fc fc fc fc fc fc fc 05 fc fc fc fc fc fc fc [ 1018.442182][T11840] ffff888067f24b00: 05 fc fc fc fc fc fc fc 05 fc fc fc fc fc fc fc [ 1018.450235][T11840] ================================================================== [ 1018.458288][T11840] Disabling lock debugging due to kernel taint [ 1018.464434][T11840] Kernel panic - not syncing: panic_on_warn set ... [ 1018.471017][T11840] CPU: 0 PID: 11840 Comm: syz-executor.0 Tainted: G B 5.6.0-syzkaller #0 [ 1018.480724][T11840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1018.490776][T11840] Call Trace: [ 1018.494069][T11840] dump_stack+0x188/0x20d [ 1018.498392][T11840] panic+0x2e3/0x75c [ 1018.502278][T11840] ? add_taint.cold+0x16/0x16 [ 1018.506952][T11840] ? print_shadow_for_address+0xb8/0x114 [ 1018.512570][T11840] ? trace_hardirqs_off+0x50/0x220 [ 1018.517670][T11840] ? nf_tables_newset+0x1ed6/0x2560 [ 1018.522863][T11840] end_report+0x4d/0x53 [ 1018.527008][T11840] kasan_report_invalid_free+0x7d/0xa0 [ 1018.532454][T11840] ? nf_tables_newset+0x1ed6/0x2560 [ 1018.537641][T11840] __kasan_slab_free+0x129/0x140 [ 1018.542570][T11840] ? nf_tables_newset+0x1ed6/0x2560 [ 1018.547756][T11840] kfree+0x109/0x2b0 [ 1018.551662][T11840] nf_tables_newset+0x1ed6/0x2560 [ 1018.556686][T11840] ? lock_downgrade+0x840/0x840 [ 1018.561541][T11840] ? nft_set_elem_expr_alloc+0x200/0x200 [ 1018.567176][T11840] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1018.573078][T11840] ? __nla_parse+0x2e/0x60 [ 1018.577499][T11840] nfnetlink_rcv_batch+0x83a/0x1610 [ 1018.582703][T11840] ? nft_set_elem_expr_alloc+0x200/0x200 [ 1018.588340][T11840] ? nfnetlink_subsys_register+0x2b0/0x2b0 [ 1018.594151][T11840] ? __nla_validate_parse+0x2af/0x1cd0 [ 1018.599606][T11840] ? cap_capable+0x1eb/0x250 [ 1018.604196][T11840] ? nla_memcpy+0xa0/0xa0 [ 1018.608526][T11840] ? ns_capable_common+0xe2/0x100 [ 1018.613539][T11840] ? __nla_parse+0x2e/0x60 [ 1018.617952][T11840] nfnetlink_rcv+0x3af/0x420 [ 1018.622544][T11840] ? nfnetlink_rcv_batch+0x1610/0x1610 [ 1018.628004][T11840] netlink_unicast+0x537/0x740 [ 1018.632763][T11840] ? netlink_attachskb+0x810/0x810 [ 1018.637870][T11840] ? _copy_from_iter_full+0x25c/0x870 [ 1018.643236][T11840] ? __phys_addr_symbol+0x2c/0x70 [ 1018.648266][T11840] ? __check_object_size+0x171/0x437 [ 1018.653550][T11840] netlink_sendmsg+0x882/0xe10 [ 1018.658307][T11840] ? aa_af_perm+0x260/0x260 [ 1018.662811][T11840] ? netlink_unicast+0x740/0x740 [ 1018.667757][T11840] ? netlink_unicast+0x740/0x740 [ 1018.672687][T11840] sock_sendmsg+0xcf/0x120 [ 1018.677095][T11840] ____sys_sendmsg+0x6bf/0x7e0 [ 1018.681847][T11840] ? kernel_sendmsg+0x50/0x50 [ 1018.686530][T11840] ___sys_sendmsg+0x100/0x170 [ 1018.691206][T11840] ? sendmsg_copy_msghdr+0x70/0x70 [ 1018.696317][T11840] ? __fget_files+0x32f/0x500 [ 1018.700982][T11840] ? ksys_dup3+0x3c0/0x3c0 [ 1018.705440][T11840] ? __fget_light+0x20e/0x270 [ 1018.710133][T11840] __sys_sendmsg+0xec/0x1b0 [ 1018.714647][T11840] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1018.719666][T11840] ? __x64_sys_futex+0x380/0x4f0 [ 1018.724601][T11840] ? trace_hardirqs_off_caller+0x55/0x230 [ 1018.730321][T11840] ? do_syscall_64+0x21/0x7d0 [ 1018.734993][T11840] do_syscall_64+0xf6/0x7d0 [ 1018.739493][T11840] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1018.745381][T11840] RIP: 0033:0x45c889 [ 1018.749270][T11840] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1018.768866][T11840] RSP: 002b:00007f756981bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1018.777270][T11840] RAX: ffffffffffffffda RBX: 00007f756981c6d4 RCX: 000000000045c889 [ 1018.785232][T11840] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 1018.793195][T11840] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1018.801157][T11840] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1018.809119][T11840] R13: 000000000000095b R14: 00000000004cc129 R15: 000000000076bf0c [ 1018.818134][T11840] Kernel Offset: disabled [ 1018.822453][T11840] Rebooting in 86400 seconds..